Thanks again for your response! You are correct about my not understanding what you meant. The app.config is actually created for you by Visual Studio and of course is modifiable with regards to the connection string. I'm pretty sure I understand how DB security and access works from the application. I'm just fuzzy on the SQL SERVER side of security setup for a Windows Domain group.

I'll do some further research on your ASP.net suggestion though. Again, thanks for the help!