Did not receive any comment for Part 1 but going by the stats I think it has been useful for few of you. Thus I think I should Part 2. In this article we are going to demonstrates how to set up custom forms authentication. The login page assumes logging in using username and password (as demonstrated in Part 1 ). The user roles for the site are stored in the database. For user identification I need userID and for authorization I need to know which group does user belong to. Wait a minute, ASP.NET provides way to handle it in web.config. like this: <location path="Admin"> <system.web> <authorization> <allow roles="Admin"/> <deny users="*"/> </authorization> </system.web> </location> ...