Once you have set up your site to authenticate users, you need a way to add user accounts to your site. In ASP.NET 2.0, you can do this by using the ASP.NET Web Site Administration Tool (WAT). The user accounts you add will be stored in a SQL Server 2005 Express database by default (located under the App_Data folder in your project), as specified by the default Membership Provider. There is no longer any need for you to create your own custom databases for this purpose or to store the user account information in Web.config (which is insecure).
The ASP.NET Web Application Administration Tool (WAT) will help you create new users for your web site and then store the users' information in the database.
In this lab, you will use the ASP.NET WAT to add new user accounts to your web application. The user accounts will be stored in the database specified by the Membership Provider (see the Section 5.1.2 of Section 5.1). By default, the WAT adds new users to a SQL 2005 Express database.
Open the project created in the last lab (C:\ASPNET20\chap-5-SecurityControls).
To add a new user to your web site, you will use the ASP.NET Web Site Administration Tool (found in the Website→ ASP.NET Configuration menu item; see Figure 5-9).
Figure 5-9. Launching the ASP.NET Configuration tool
Alternatively, you can invoke the ASP.NET WAT by clicking on the ASP.NET Configuration ...