>>Multiple users can sign in (one at a time) on a "shared" computer - one signs out, another signs in.
>
>This is not what the customer wants. They simply want to synchronize the username and password used for the PC/AD and the VFP application to be the same. This way, the users only need to remember one.
>So far, I sent them a quote for what I need to do to change the application.
>@Hank Fay. If I have to implement this modification, I will not store the AD password anywhere in the VFP DB. Only username.
>I still have not ironed out how my app will validate a user based on his/her AD username and password. I will have to look at the code Mike Gagnon wrote. And understand every line so that I can ask the customer the right questions.
>Personally, I hope they won't go with this change. I know that this will create somewhat of a maintenance headache. And at this point in my life/carrier, this is not my preference.
>Thank you all.

You could ask the customer to get an opinion from their own IT security team whether it's OK for your app to be given AD credentials.