Alex Smolen did a good write up of the various approaches for sandboxing ASP.NET applications. Recommended!