.NET Security

I've got a web (intranet) application that uses windows authentication. Once a user has connected the applicaiton picks up their username and looks up details in a database using the username as a key. The username is got from the following: ...