I trying to setup an intranet based on windows NT groups or roles.
I have used windows integrated authentication with impersonation first
but this include to use a user to access the database.
I would prefer to use windows security based on groups or roles .
If i set the impersonate attribute to false or simply remove the
identity tag from my web.config file .

how can i manage my security for database?

I know i have first to setup groups or roles in sqlserver and set the
permissions for these groups or roles.

but how can i make the link between NT windows groups/roles and
authorization perimissions in my config file.

Is it done automatically or should i have to access Active directory
with ldap?

If the authentication server is NT 4.0 (not using active directory)
what should i used to know if a user belongs to this or that group ro
role?

any link , answer or explanation that will clarify this case would be
great.

Thanks for any help

Eric