>Just wanted to add this:
>
>http://www.radium.ncsc.mil/tpep/epl/epl-by-class.html
>
>Notice that Windows Server 2003 and Novell 5.x/6.x have not passed C2 certification yet. MSFT has never passed anything higher than C2.

Yes, thanks Tracy, Ive seen that security list before, though haven't checked it recently. We are not technically (as in mandated by Congress) required to be fully C2, but we are unofficially forced to be anyway by DOL, due to some past really embarrassing problems with premature release of national CPI & PPI index data (a situation where people could make fortunes if they knew the data even a few minutes before public release).

BTW, aside from Win2003, I don't see Win2K or WinXP Pro on that product list either, unless I'm missing them (though they may just regard these as as mere extensions of NT4 with same basic OS. I guess that would make sense.)

Ah yes, the days of yore. I remember learning ADA back in the 80s (my first (truly oop experience, in fact). I recall thinking, hey this approach is really interesting, but what the heck is it useful for? Well, my question sounds foolish now, of course.

An additional note, for anyone interested: while there is no hope at all for MS SQL Server usage at my agency due to the "product diversification" policy (which now goes to an all-Oracle DB from Sybase, as I said in prior post), there *is* still some hope for adding MS development tools like VFP & .NET to the primary IT "standards" list for devtools. I'll keep working on it, as PB has also fallen out of favor now, and replacements(s) for it are being looked at. I think there could be an opportunity here...