<configuration>
   <system.web>

      <authentication mode="Forms"/>
      <authorization>
         <deny users="?"/>
      </authorization>

      <!-- Other settings removed for clarity -->

   </system.web>
</configuration>
