Jim_ said:Have a login form with a password.
If the login is successful, store it in a session cookie.
If the session cookie is valid, allow them to see and use the controls.
If the session cookie is invalid or doesn't exist, delete the session cookie and show login form.
Maybe this will help? http://www.evolt.org/article/Creating_a_login_script_with_ASP/17/28652/index.html