>What we are trying to do is create a Web app that users should be able to access with a login. So if we use an ADO, do we need to have the security at the Web only or at both the web and server?
>
>Hope I haven't confused you guys more...
>
>Nicky

My recomendation would be, for a web ap, since the users never actually connect to the database, to use a single SQL Login (SQL server or Nt server doesn't matter) which has db_owner access to the data (or SPs) and control the user login/secuirty at the application level.

BOb