>I'll go you one better on that one: You can (somewhat) integrate a DBC with Windows security by using the SYS(0) function to validate a user versus a free table of permissible users.

Interesting idea. How about replacing SYS(0) with and ADSI routine to read the NT/2000 users and/or groups? That should work.