ASP & SQL on IIS environment

I'm new with ASP & SQL programming running on IIS servers at my
workplace. Our company utilitize logon script to authenicate our
users into workstations using Domain Controllers. Is there any
resource or recommendation that I can use to establish a security on
our applications? I got so many different ways and am not sure which
one is the most secure.

Thanks in advance,

Scott

-- 
Power to people, Linux is here.