You can use one of the standard RoleProviders, such as SqlRoleProvider
, in conjunction with Windows Authentication.
This blog post from Scott Guthrie gives a step-by-step recipe for doing this.
There's no need for a custom RoleProvider, unless you have other requirements that aren't met by the standard SqlRoleProvider
.