+4  A: 

You should look for "role based security" for ASP.NET. Here's a tutorial.

Otávio Décio
+2  A: 

You probably want to look into Forms Authentication. Using it, you can create all kinds of rules for determining who is able to access what page.

David Hedlund
+1  A: 

Use the authorization element in the web.config

Jon