Hi all,

My previous Q on this didn't get answered. I may have confused matters a
little.

If I use Active Directory to authenticate users on my site, where do I
manage the other aspects of site security such as roles? Is it all done in
the active directory or the membership data in the SQL Server?

i.e. If I set up AD as my membership provider and use the ASP.NET
configuration page, does the AD provide purely just the authentication. I
see in web.config there is membership defaultProvider and a seperate
roleManager which can use a different connection string.

Thanks.