Authentication and Certificates

From: Craig Hoss (choss@edix.com)
Date: 11/27/02 

From: "Craig Hoss" <choss@edix.com>
Date: Wed, 27 Nov 2002 11:51:05 -0800

I know I want to utilize 128-bit SSL for the encryption,
but wanted to get feedback on selecting the
authentication type. For this solution, we will be using
IIS5.0 and SQL 2000 for our database.

We will have about 3,000 web clients that will need to
authenticate to these web servers). I would like to
avoid creating usernames and password in a SQL and
seperate that function to a WIN2K AD Server. I would
also like the ability to force password changes/passing
aging (which works nicely in Windows and you are logging
into a Domain).

Here is my question:
How can I replicate this password change/password aging
feature if I am keeping the usernames and passwords in a
seperate Win2K AD Domain and the user is using Netscape
or IE? Does Microsoft have any tools/hooks that can make
a call to the Win2K account database (not sure if they
still call it SAM) to see if it is time to change their
password, then pop up a generic dialog box?

Please advise.

Thanks,
Craig