I have finally finished my video on using windows impersonation and having multiple security roles throught the application.

I feel that the worst habbit most developers have is having only one user account that has access to the entire database. In the video I create 2 windows users (a regular user and an administrator) then grant them rights to the database and certain objects within the database. I also talk about how to have the website connect to the database using a trusted connection under the two roles (so no passwords stored in the config file which is my other developer habbit that ticks me off).

The video runs for 20 mins and is quite large (105mb) but it was the only way I found I could keep the quality at a reasonable level. I will keep playing with video settings to see if I can get it smaller.

MultiRole.avi