windows integrated authentication and impersonation

[Eric]

I trying to setup an intranet based on windows NT groups or roles.
I have used windows integrated authentication with impersonation first
but this include to use a user to access the database.
I would prefer to use windows security based on groups or roles .
If i set the impersonate attribute to false or simply remove the
identity tag from my web.config file .

how can i manage my security for database?

I know i have first to setup groups or roles in sqlserver and set the
permissions for these groups or roles.

but how can i make the link between NT windows groups/roles and
authorization perimissions in my config file.

Is it done automatically or should i have to access Active directory
with ldap?

If the authentication server is NT 4.0 (not using active directory)
what should i used to know if a user belongs to this or that group ro
role?

any link , answer or explanation that will clarify this case would be
great.

Thanks for any help

Eric

[Patrick.O.Ige]

If you are looking at using Roles in the Active Directory
you can go through my blog at:- http://spaces.msn.com/members/naijacoder/
and look for How to configure and implement a Role based Windows
Authentication
And if interested in Forms then see :-
http://www.codeproject.com/aspnet/formsroleauth.asp
Hope that helps
Patrick


"Eric" <er*****@hotmail.com> wrote in message
news:11**********************@g49g2000cwa.googlegr oups.com...

I trying to setup an intranet based on windows NT groups or roles.
I have used windows integrated authentication with impersonation first
but this include to use a user to access the database.
I would prefer to use windows security based on groups or roles .
If i set the impersonate attribute to false or simply remove the
identity tag from my web.config file .

how can i manage my security for database?

I know i have first to setup groups or roles in sqlserver and set the
permissions for these groups or roles.

but how can i make the link between NT windows groups/roles and
authorization perimissions in my config file.

Is it done automatically or should i have to access Active directory
with ldap?

If the authentication server is NT 4.0 (not using active directory)
what should i used to know if a user belongs to this or that group ro
role?

any link , answer or explanation that will clarify this case would be
great.

Thanks for any help

Eric