Thanks for replying, but sessions are exactly what I am trying to avoid. For my brand of state management, I need to support multiple web servers in a farm, and sessions (just "memory cookies" really) won't scale for what I am trying to do.

I wanted to put the GUID into the HTTP header so the user doesn't necessarily see it in the "querystring" (in the address textbox), but it is still always there for the server to see.

Thanks again.