Reply to thread

Message: [QUOTE="google, post: 8254861"] Yes, I had read plenty about DPAPI and such, but how am I supposed to use ASP.NET configuration encryption stuff on a WinForms app? It doesn't look like it's intended for WinForms apps and it seems like an enormous amount of effort for no apparent improvement or gain over the current method I'm using now.... which is basically one method added and one line to call it... zero machine configuration, no IIS, etc... The problems with integrated security are: - Our admins (who are across the country) don't get around to creating new domain users for several days up to a week. Our data entry employees can't sit around that long with nothing to do, especially because of the nature of temporary project that uses this app and the high turn-over rate in the data entry positions. - Once in a while, we need to terminate someone and block their access immediately. We need a local "app admin" to create and delete user accounts on demand. - We also need extremely, granular, application security that can't be performed at the SQL Server level, nor the Windows level. We need specific groups and specific users to have access (or be specifically denied access) to certain application objects and features. So, as nice as integrated security is, it's just not an option. I appreciate the information though. I do intend on looking more closely at DPAPI for my ASP.NET apps. Thanks! [/QUOTE]