windows integrated authentication and impersonation

I trying to setup an intranet based on windows NT groups or roles.
I have used windows integrated authentication with impersonation first
but this include to use a user to access the database.
I would prefer to use windows security based on groups or roles .
If i set the impersonate attribute to false or simply remove the
identity tag from my web.config file .

how can i manage my security for database?

I know i have first to setup groups or roles in sqlserver and set the
permissions for these groups or roles.

but how can i make the link between NT windows groups/roles and
authorization perimissions in my config file.

Is it done automatically or should i have to access Active directory
with ldap?

If the authentication server is NT 4.0 (not using active directory)
what should i used to know if a user belongs to this or that group ro
role?

any link , answer or explanation that will clarify this case would be
great.

Thanks for any help

Eric

Re: windows integrated authentication and impersonation

If you are looking at using Roles in the Active Directory
you can go through my blog at:- http://spaces.msn.com/members/naijacoder/
and look for How to configure and implement a Role based Windows
Authentication
And if interested in Forms then see :-
http://www.codeproject.com/aspnet/formsroleauth.asp
Hope that helps
Patrick




"Eric" wrote in message
news:1129709503.921288.159580@g49g2000cwa.googlegroups.com.. .
> I trying to setup an intranet based on windows NT groups or roles.
> I have used windows integrated authentication with impersonation first
> but this include to use a user to access the database.
> I would prefer to use windows security based on groups or roles .
> If i set the impersonate attribute to false or simply remove the
> identity tag from my web.config file .
>
> how can i manage my security for database?
>
> I know i have first to setup groups or roles in sqlserver and set the
> permissions for these groups or roles.
>
> but how can i make the link between NT windows groups/roles and
> authorization perimissions in my config file.
>
> Is it done automatically or should i have to access Active directory
> with ldap?
>
> If the authentication server is NT 4.0 (not using active directory)
> what should i used to know if a user belongs to this or that group ro
> role?
>
> any link , answer or explanation that will clarify this case would be
> great.
>
> Thanks for any help
>
> Eric
>