Not necessarily. It will restrict the data to the process as the "user" in
question is generally the process ASP.NET is running under. Both machine
mode and user mode keys are already created by .NET.
I have not delved deeply into Ent Lib, so I cannot answer the best way to
set up the Crypto block. If you want more info on what is going on
underneath the hood, look up the Data Protection API (DPAPI). You will
likely find clues there.
For the EntLib, I would consider looking at the following:
http://msdn2.microsoft.com/en-us/library/aa480453.aspx

Signature
Gregory A. Beamer
MVP, MCP: +I, SE, SD, DBA
Subscribe to my blog
http://gregorybeamer.spaces.live.com/lists/feed.rss
or just read it:
http://gregorybeamer.spaces.live.com/
*************************************************
| Think outside the box!
*************************************************
> Hi
>
[quoted text clipped - 26 lines]
>
> Brian Braad Nielsen