To deny a particular user form accessing the secured resources, the web.config file must contain the following code: <authorization > <deny users="username" /> </authorization>