FWIW - I had some help from Daniel Gramunt on this - when my app starts I open a users table that remains open as long as the app is running - users log in and their record in the table is locked (prevents them logging on twice). To limit users logging on I just check how many records are locked in the users table. I know this is a slightly different approach than folder access etc but I thought I'd throw it in anyway!