When we configure anonymous policy for a web application, there is an option for "deny all". Why is that?
We can just disable anonymous access, right?
Why would we enable anonymous access and use a "deny all" policy? Why would we use a "deny all" policy if the anonymous access is disabled?