>>>Multiple users can sign in (one at a time) on a "shared" computer - one signs out, another signs in.
>>
>>This is not what the customer wants. They simply want to synchronize the username and password used for the PC/AD and the VFP application to be the same. This way, the users only need to remember one.
>>So far, I sent them a quote for what I need to do to change the application.
>>@Hank Fay. If I have to implement this modification, I will not store the AD password anywhere in the VFP DB. Only username.
>>I still have not ironed out how my app will validate a user based on his/her AD username and password. I will have to look at the code Mike Gagnon wrote. And understand every line so that I can ask the customer the right questions.
>>Personally, I hope they won't go with this change. I know that this will create somewhat of a maintenance headache. And at this point in my life/carrier, this is not my preference.
>>Thank you all.
>
>You could ask the customer to get an opinion from their own IT security team whether it's OK for your app to be given AD credentials.

Actually it is their IT team who is "pushing" for this change. The users could not care less. I think one aspect they (IT Security) like is that the password in AD is "forced" to be changed every so often (I think every quarter). Where is my app does not require a change of the password.