Not sure if I can help but don't you need a <location>tag in your web.config that either has the protectedfile's name or a folder's name that all the protectedfiles go in? I'm pretty new at this so, caveat emptor.