I've read this entire article, and based an application from it:
http://www.asp.net/Learn/Security/
I will distribute my application to multiple customers who will be running these different scenarios for security, how would they be applied to a site using security:
1. Windows Form Security - using the built in aspnet_Membership tables. So the user types in login information, and its authenticated with the sql server tables, just like the tutorial said. I have this finished.
2. Windows Form Security - using Active Directory Credentials. So the user types in login information, which is checked again active directory. Much like Exchange Web Access does already. The computer with IIS hosting the web application doesn't even need to be in the same domain, but it checks the login information with a pre-specified AD server.
3. Windows Security - using AD credentials. In this setup, assum ...
Go to the complete details ...