>Using a memo file is a different argument and, as I replied to Marcia, putting all the INI's where they are accessible to all users pretty much rules out their use for any security related settings.

Hi Viv,

We don't use the ini file for security level settings. Only workstation specific settings (stored on the workstation or in a user folder on the server) and application global settings (stored on the server). Security settings are handled via encrypted data in a table. However, you could if you wanted to and store it in a user specific folder where all users only have permissions to view/access the files in their own user directory (just like in Novell). This works best for Citrix and terminal server obviously as well.