asp.net authentication

[reddzer]

I am using asp.net with sql server 2000 for an intranet web application. I was wondering should i use forms authentication or windows authentication. Is either better than the other? Also there maybe a requirement in the future for remote access using a vpn, would forms or windows suit this better? Any input would be much appreciated.

[PeOfEo]

Windows Auth will mesh better especially if your stuff is on a domain. Are you using active directory? Windows Auth integrates your security really nicely. If you use forms Auth then you have to store accounts and passwords somewhere, either in DB or in a config or xml file somewhere. With windows Auth you can give whole AD groups access to a particular resource, and then the user can VPN to the domain and login with their AD-ID. It removes a lot of headaches.

Forms Auth is great for internet applications that may have a control panel or something and may only have one or two users, but for intranet aps, or apps where there are a lot of users with permissions for tons of different things windows Auth is easiest.