ASP.NET Authorization what does the * and ? mean?

Question

In ASP.NET I often see (and have copied the following) but never really understood the difference between the * and ? symbols.

for example

<system.web>
  <authorization>
    <deny users="*" />
    <deny users="?" />
  </authorization>
</system.web>

Just wondering if anyone can tell me the difference?

Cheers.

Answer 1

The * is a wildcard meaning "everyone", ? means anonymous users.

Answer 2

? means anonymous users.

* means all users.