I posted a thread few weeks ago in "Common Language Runtime" forum on slow .NET application startup in isolated domain. I got a good lead to get the hotfix KB936707 and it solved our problems for standalone application. For ASP.NET application, we so far can only find out that bypassing the Authentication Code checking can only be configured in machine.config file. Is there a better solution for that? Will Microsoft plan to support better configuration to bypass this checking (e.g. per website - web.config, per application pool)?

P.S. I posted this question in "Common Language Runtime" forum first but was suggested by Microsoft to move the question to this forum.