<configuration> <system.web> <authentication mode="Windows" /> <authorization> <deny users="*" /> </authorization> </system.web> </configuration>