>No matter what the architecture is, access is given if I have the appropriate name and password--if I don't I should be locked out.
>

Well... if I create a VFP ap, the user needs network rigths to access the data.

However, if I create an SQL server ap, and the application logs into teh server with an account and password the user doesn't have access to, they don't have access to the data directly, only via the connection the ap is using.

So, even though I can run the ap in the second instance, I can't run Access and browse the tables.

BOb