Use aspnet_setreg to setup encrypted sections of the config file. Use this as a way to securely store the connection string information.

They talk about the connection string used for session state, but wonder what we can do about this for storing connection string information for the user portion of the app?

329290 - HOW TO: Use the ASP.NET Utility to Encrypt Credentials and Session State Connection Strings