Channel9 has created a security wiki for all your ASP.NET security 2.0 needs; it’s pretty good info.  If you have the time, check it out.