How to allow/deny windows userid's access to web pages

I have a site in which impersonation is turned on in the web.config ...
<identity Go to the complete details ...