Hi,

I am a bit of a .NET novice and am writting a .NET website which uses AD for verification. I have been told I need to add a connection sting into the web.config file (which I have done) but this connection string contains an AD Admin username and password that is very sensative. I need to encrypt the connection string to stop people on the machine accessing the login information.

My connection string is something like this:

<membership defaultProvider="MyADMembershipProvider">
<providers>
<add 
connectionStringName="ADConnectionString" 
connectionUsername="SysAdmin"
connectionPassword="password" 
attributeMapUsername="sAMAccountName"
name="MyADMembershipProvider" 
type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
</providers>
</membership>  

 If it helps I am using .NET 2.0 and have to connect to an Oracle database.

Any help and advice would be great. 

Thanks!