**Yeah, you can use an API call to verify the user. But realize this won't actually log the user in under this account - you can't do that in a standalone application. Only services and the SYSTEM account can actually impersonate other accounts. Still the only way to really log on is to log off and back on.**

Exactly what I want -- I want to grab that user_id and re-check against my user's table. It is not for login to NT or anything. The purpose was to avoid passwords in my system (so the user would not have to maintain 2 passwords) -- but just to check if the person entering into the system is a vlaidated user on the network!


**The code below performs the username/password check against NT's security manager. You can read up in MSDN on how this function relates to security contexts etc. - but let me warn you: You won't want to mess with this stuff beyond the basics, because NT Security is sick and twisted if you need to get beyond the highlevel stuff and switching user context is among the most heinous code that you can write (I remember spending 3 days to write an File ACL setting utility and I had sample code <s>)...**

Thanks a alot! I will try the code out in the safety of my home before unleashing it on the public.

Sorry I couldn't make it to Hawaii -- I signed up twice for Orlando DI, but I guess there wasn't enough of us. I still have just the shareware WC3.0 now, but I hope to buy within the month. Keep up the absolutely outstanding work!!!!!!

Kevin

P.S. What laptop do you use for your NT4/IIS/WC development or demos?