Security and Authentication Problem

[Jonathan]

Hi,<br><br>I've been asked to look into allowing some of our clients to access data from our databases over the web.&nbsp;&nbsp;After reading through reams of NT Option Pack documentation, I've come up with the following. Can anybody tell me if this is sensible, or give me any hints/tips?<br><br>- Use Certificate Server to create a server certificate which I can then use to implement SSL on the server.<br><br>Then either:<br>- Create NT accounts on the server which can be used for the clients to log on with, and then use ASP to determine what they can get from the DBs.<br><br>Or<br>- Issue certificates to the clients, and use ASP to look at the client certificate info to determine what they can get from the DB.<br><br>Am I going along the right lines?&nbsp;&nbsp;Or am I completely off in the wrong direction?<br><br>Cheers,<br>Jon <p> Jonathan<br><a href=mailto:j.w.george@virginnet.co.uk>j.w.george@virginnet.co.uk</a><br><a href= > </a><br>Working with: Visual Basic 6, Access 97, Visual Interdev 6, VBScript, Active Server Pages, SQL Server 6.5, Oracle 7