Cannot get location / system.web / authorization (web config) to work

Hi,
Could somebody look at the attached web.config? The last part doesn't seem to work although the path is correct. I've tried logging on the site with a use which is in no groups, but it can still access the page...
<?xml version="1.0"?> <configuration> <connectionStrings> <add name="ApplicationServices" connectionString="Data Source=LARS-PC\timereg;Initial Catalog=Timereg;Persist Security Info=True;User ID=TimeRegUser;Password=xxx" providerName="System.Data.SqlClient"/> <add name="TimeregConnectionString" connectionString="Data Source=.\timereg;Initial Catalog=Timereg;Persist Security Info=True;User ID=TimeRegUser;Password=xxx" providerName="System.Data.SqlClient"/> </connectionStrings> <system.web> <compilation debug="true" targetFramework="4.0"> <assemblies> < ...