web.config

This is a book about vb.you could learn this from this book

<configuration>
<system.web>

  <authentication mode="Forms">
    <forms name="MyApp03" path="/" loginUrl="custom-login.aspx"
           protection="All"  timeout="30" >
    </forms>
  </authentication>

  <authorization>
    <deny users="?" />
  </authorization>

</system.web>
</configuration>