One of the most common requirement related to website's user account security is to prompt for changing password after certain days (usually 90 days). This can be developed with the help of ASP.NET's Membership API.

Membership API already include last password change date as a part of database record and Membership User class provide a property to get that date for user from data store.

Today we will use Membership User class's LastPasswordChangedDate property to determine if user's last password change date was less than 90 days or not and if not then we will redirect user to change password page with message that his password was expired and he will need to change it. [More]

To offer better manageability and more security for login and user maintenance Microsoft separated roles into Database roles and Application Roles. Application Roles are mainly used by applications and they do not contain any database users. In this article we will see as how we can create an Application Role in SQL server and use it in a web application.
[More]