Online reference for ASP.NET security?

[wey97]

Is there a good online reference for setting up ASP.NET security?

I've modified the web.config file of my application like so:

<authentication mode="Windows" />
<authorization>
    <deny users="?" />  <!-- deny anonymous -->
    <allow users="my_domain\my_username" />
</authorization>

This seems to have no effect because other users besides me can still access the application.