<?xml version="1.0"?> <configuration> <system.web> <authorization> <deny users="?"/> <allow users="*"/> </authorization> </system.web> </configuration>