I am building a very simple asp.net application that will have a SQL Server 2008 backend.
Some users will be entering data and storing in the database and some users will be viewing data.
The SQL Server 2008 is working with Windows authentication for every user; however, I am unable to get ASP.NET working with Windows authentication yet. Is there a simple way to allow windows authentication with ASP.NET? I found a very convoluted way, but I don’t like it.
I will need to audit every action that the users perform.
Should I audit the users at the application level or at the SQL Server level?
Are there already built in methods to do this? If so, how?
I would do this from the application if it is significant HOW people accessed the data as much as the WHO, but that’s quite different from rlb.usa’s answer. In my past jobs, it’s often been as important to know which application the person changed data from as when/who. If it’s primarily for application issues, log4net is a good option.