We're redoing all our SQL permissions where I work because previously all our applications had used the same built-in login in their SQL connection strings. It's a bit of a headache going through and giving certain groups permissions to certain tables, views and stored procedures, so I'm wondering if it would be an efficient and secure solution to just use the ASP.NET machine account for accessing SQL.

If we converted all our applications to use the ASP.NET machine account and then gave that account the appropriate permissions on our SQL databases, would that be a good idea? Would it be secure? Anyone else done this?

Thanks