The security can be done different ways. If you are using the ASP.NET default, the ASPNET account needs to be a user on your domain with the appropriate rights to the directory where the data is stored.

If you use impersonation, then that account must be a valid user on the domain with the appropriate rights for the data directory. Here is a sample of what to put in the web.config file

<identity impersonate="true" name="domain\user" password="password" />

>Using Web form to try to access the remote VFP table and works fine with local VFP table whether it is DBC or Free Table.
>IF it does relate to security issue, how to config the system to work it around? Thanks!
>Thomas.