Yes, I agree, It would be a security issue. I guess I was spoiled by the Novell operating system where you can pass it a Userid/password pair and it would report back whether or not it was a legal match. Yes, this does mean that I could Find a users password, but I guess Novell thought this was ok since We were developers of applications running on their servers.