When a user logs in i just get his/her details from the database and store the ones i need in a Session. eg..
(rs = my record set)
Session("ID") = rs("ID")
Session("login") = "true"
Session("type") = rs("membertype")
To track the users actions just do what percent20 said.