Hi Sean, I only can read half of your reply in the email sent to me, the rest of it simply said "...(continued)", I guess you might have clicked the Email link instead of the Reply. Fortunately, the first half of the email may help me figure out the cause (hopefully). Well, after the login control authenticates the user, if the user is authenticated, the control will add the authentication cookie with the same name which you use it your own method. This happens after the Authenticate event, so it may override your own cookie. So your authenticate code should validate the user credentials only, and you can create an event handler for the LoggedIn event to add your authentication cookie. In addition, you may also want to check out the Roles Management in the ASP.NET 2.0 instead of managing on your own. http://msdn2.microsoft.com/en-us/library/53s18z5c.aspx[^] http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000013.asp[^]