Summary

In this chapter, you learned how to configure ASP.NET applications to use Windows security. In the first section, you learned how to use Windows authentication with Windows users and groups to password-protect files in a directory. You also learned how to create custom roles and associate these roles with existing user accounts.

You also examined the topic of impersonation. You learned how to enable impersonation so that pages execute with the permissions of the user requesting the page. You also learned how to execute all the pages in an ASP.NET application under the security context of a particular Windows user account.

Finally, the chapter provided a brief overview of security policies. You learned how to apply different security policies to an ASP.NET application.