>Dmitry,
>
>A while back you were looking at AD authentication for user logins using your app. What did you end up doing?
>
>I have a customer where the windows API LogonUser refuses to accept credentials. The customer has a huge distributed AD with over 100 Domain Servers with a central consolidator. Logonuser refuses to work even if you try to use the GetEnv("userdomain") as AD, which gives you the local AD and ought to work since the user is already logged into it!
>
>Any updates appreciated!
>
>Regards, J

Hi John,

Here is what I ended up doing. In order to log into my web application, a user is prompted to enter his/her AD username. That is, the same username they enter when logging into the Windows. No password.
Then, my application - using a standard .NET class and the domain name - get the user name and his/her email.
The AD username, real name, and email are added to a SQL Server table (SQL Server DB of my application)
The benefit, IMHO, is that anybody can log into the PC and then log into my app. The log out so that another person would log into the app.
Keep in mind that this approach works not in a VFP application but in a .NET ASP.NET applicaiton.

Let me know if you have any questions.