Only one problem: With no objects and no DECLARE - DLL supported by the provider, how you gonna do that?

>>I'll go you one better on that one: You can (somewhat) integrate a DBC with Windows security by using the SYS(0) function to validate a user versus a free table of permissible users.
>
>Interesting idea. How about replacing SYS(0) with and ADSI routine to read the NT/2000 users and/or groups? That should work.