Secure login using Windows Integrated Security

[lagyossarian]

Does anyone have an example of how to accomplish a secure login using Windows Integrated Security in VB.Net? I'm a newbie to Vb.Net and the .Net Framework. Thanks in advance for any help/assistance.

[Phil Weber]

Is this a Windows Forms (desktop) or ASP.NET (Web) app?

[lagyossarian]

Phil,

This is a Windows form application. Also, on a related topic. How does one go about determining what NT/2000 Security Role/Group that a user is a member of?

Greg

[pclement]

Once you're logged on to the network from Windows, you're already authenticated. Do you simply want to check the user's roles (group membership) at this point?

Also, is this an Active Directory domain?

[lagyossarian]

Paul,

Understood about the already being logged on -- I want to be able to check their group membership and perhaps, later in the application check which user is looged on to the application. This is not an AD domain; but, if they choose to move to AD is it sgnificantly different to accomplish this task?

Greg

[pclement]

Doesn't matter whether you have an AD domain but I was just asking since there are different ways to implement role based security.

I would take a look at the System.Security.Principal namespace, specifically the WindowsPrincipal class. There is a method you can call named IsInRole that will indicate whether the authenticated user belongs to a specific group.