>Bruce here is some info on the side of your network guys.. I don't completely agree with it all.
>
>http://www.ntsecurity.net/scripts/loader.asp?iD=/security/tips.htm

Thanks, Evan (I think :) That's likely the exactly the sort of doc the security guy got his info from, most of it looks familiar. It doesn't give any reason why not to display last user name, though. We already have permanent lockout after 3 bad logon attempts, you have to go in person to central security and show your ID badge to get back in. So I think probably the security guy is just kind of mindlessly following the recommendations, is my guess - he can't seem to justify his position, as I say...