(1) I never really figured out Forms Authentication under the new VS 2008 regime. For those few web sites where I have pages I want to hide, I have hard coded everything.
I seem to have a blind spot. Probably I am repeating something which worked in VS 2003 and isn't necessary in the new regime.
(2) In the matter of web.config : I initially tried converting my VS 2003 pages to VS 2008 by running a converter which you can find. This did not really work, and in particular it made a real mess of web.config. Even after I spaced it all out and compared it with other examples I was pretty unsure what I was looking at.
(3) Rather than convert a VS 2003 web site, what I do now is to copy - paste all the .aspx and aspx.vb stuff on to Notepad documents. Then I rub out the original site completely and create a new one with a similar but not identical name. This means that you have a newly created web.config which does not give problems. Then I create the necessary pages and paste the code back again from Notepad. On the newly created .aspx pages, I retain the first line, but replace everything below this with the old stuff.
(4) There are a few places, especially in the .vb stuff where the odd adjustment has to be made.
I'm afraid some of the above probably looks a bit childish to an experienced hand, but I have little interest in the fine points of ASP.NET. "Does it work ?" is what I'm interested in.
Even though Microsoft have made really heroic attempts in recent times to make their instructional documents more user-friendly, the keel of my mind still sometimes grounds on the rocks of their nomenclature.
David Morley