>>Actually it is their IT team who is "pushing" for this change. The users could not care less. I think one aspect they (IT Security) like is that the password in AD is "forced" to be changed every so often (I think every quarter). Where is my app does not require a change of the password.

For AD authentication I believe we used to rely on Rick Strahl's LogonUser function in Web Connect's wwapi.prg. From memory it used to need admin rights, though that requirement was relaxed in newer Windows. Worth checking out.

My experience: these days it's common to see login pauses of over 30 seconds to re-establish profile on a busy LAN or WAN. Busy workers can't wait that long just to look something up, so shared always-logged-in PCs are becoming commonplace. Customers still want control over user access, so your scenario will be seen more frequently IMHO. If/when you get it going, it would be fantastic to post your working solution here.