>Frank,
>
>I can't answer for #1 but as far as security is concerned, you just need to grant 'execute' rights to the user that will be used for your web app. For mine, it is 'NT Authority\Network Service'.
>

Hey Bob,

I've tried configuring IIS 7 on Vista and got the message about 'NT Authority\Network Service'. I tried to add that user to my database, but SSMS could never find that user. Was there any trick you used to get it to work?

Right now I'm working around it by setting

<system.web>
	  <identity impersonate="true" userName="frank" password="cmypassword" />

in my web.config, but don't like this solution because of the visibility of the password and dependence on my user name.

Any suggestions anybody?