As has been said, the main method to accomplish this is in the website set-up. You set the "directory security" of the web site in IIS to "Integrated Windows Security" (slight language difference between Win2000 and Win2003 servers).
Then the CGI.Auth_User variable will be populated with the domain/username of the user who logged into the computer assuming they are access the site with IE or Netscape (which contains both IE and Mozilla engines). If not, but the browser still understands the Windows Authentication methodology (such is FireFox) the user is presented with a login dialog box to access the site. Other browsers that do not understand this will not be able to access the site. If one wants to take this father, one can also access the AD directly with Java objects or the CFLDAP tag. We use all three of these methods here. Feel free to contact me if you would like to know more. -------------- Ian Skinner Web Programmer BloodSource www.BloodSource.org Sacramento, CA "C code. C code run. Run code run. Please!" - Cynthia Dunning Confidentiality Notice: This message including any attachments is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender and delete any copies of this message. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:226686 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

