I’ve always struggled a bit with the forms authentication system in .NET, however this article does a great job of explaining it in simple terms.

Look also at the comments, there is reference to using the location tag in the web.config file to ensure that only specific pages or folders require authentication.