We do that all day, everyday. How far do you want to take it? The short answer is to set directory security in IIS for the website or some portion of it to "windows integrated security" and disable "allow anonymous access". The last part is important. Then access cgi.auth_user in your cf code, it will contain the username of the user who logged in on the client system.
This assumes a windows server running IIS web server software, a client running some flavor of relatively modern MS OS software and an MS IE browser or something the understands it, if you don't want a username and password challenge when users access the secured site or section of the site. If you want to know how much father one can take this by accessing java NT and/or LDAP functionality let me know and I can tell you more tomorrow. My day is done here. -------------- Ian Skinner Web Programmer BloodSource www.BloodSource.org Sacramento, CA "C code. C code run. Run code run. Please!" - Cynthia Dunning Confidentiality Notice: This message including any attachments is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender and delete any copies of this message. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:225892 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

