22.1. Using Windows Authentication22.2. Using Forms Authentication22.2.1. Setting Up Forms Authentication22.2.1.1. Handling Login Attempts22.2.2. Using Cookieless Forms Authentication22.3. Using Membership, Roles, and Profiles22.3.1. Setting Up and Using Membership22.3.1.1. Setting Up SqlMembershipProvider22.3.1.2. Using SqlMembershipProvider with SQL Server Express22.3.1.3. Manually Preparing SQL Server22.3.1.4. Managing Membership22.3.1.4.1. Using the Web Site Administration Tool (WAT)22.3.1.4.2. Using the IIS .NET Users tool22.3.1.5. Creating a Custom Membership Provider22.3.2. Setting Up and Using Roles22.3.2.1. Setting Up SqlRoleProvider22.3.2.2. Managing Roles22.3.2.3. Creating a Custom Roles Provider22.3.3. Setting Up and Using Profiles22.3.3.1. Setting Up SqlProfileProvider22.3.3.2. Configuring, Reading, and Writing Profile Data22.3.3.2.1. Enabling Anonymous Profiles22.3.3.3. Creating a Custom Profile Provider22.4. Why You Shouldn't Use URL-Based Authorization22.5. Restricting Access Using IP Addresses and Domains22.6. Summary