I have an app that communciates via the anonymous account from the web server over to a server (both W2K) housing SQL Server 2000. I need to allow the web server's local IUSR_machinename account to log on locally to the remote SQL Server box. I have achieved this by enabling the guest account on the SQL box and it works. To make it more secure I have gone one step further and created a domain level user and changed the web server's anonymous accoun in the servcies to point to the domain user; thereby giving it the rights it needs to log on locally. I have read on Microsoft's site though that there is an additonal way but for the life of me I can't figure out how to do it, or how it's even possible. They say "Add the account to the local user account database on the NT server that SQL resides on". How is this possible?? Thanks.