Stephen,

>Would you say this security scheme is not suitable in a shrink wrap product? Each user created in MM.NET have to be created in MSDE or SQL separately. Which also means the administrator of the software will need to have administrator right in SQL Server, which might not be a good idea.

It's not really an MM .NET issue...it's more a question of whether you want to use SQL Server Authentication or Windows Authentication...both work well with MM .NET.

Regards,