web.config

This is a book about vb.you could learn this from this book

<configuration>
<system.web>

  <authentication mode="Forms">
    <forms name="MyApp02" path="/" loginUrl="login.aspx"
           protection="All" timeout="30">
      <credentials passwordFormat="Clear">
        <user name="billjones" password="test" />
        <user name="marthasmith" password="test" />
        <user name="joesoap" password="test" />
      </credentials>
    </forms>
  </authentication>

  <authorization>
    <allow users="billjones,marthasmith,joesoap" />
    <deny users="?" />
  </authorization>

</system.web>
</configuration>