I've succesfully set up Elmah in my web project and I can access the crash log at http://www.myserver.com/Elmah.axd .
The only question is how to secure this URL so that only my colleagues (as opposed to anonymous users and users who are logged in, but not part of my team) can access it. ASP.NET forms authentication is already set up on the system.
Thanks,
Adrian