<?xml version="1.0" encoding="utf-8"?> <configuration> <authorization> <deny pages="EditUser" users="?" /> </authorization> </configuration>