Hi Toby > No feedback on this from anyone yet. Well, that doesn't really sound encouraging .. So it looks like the main NT-based authentication for Zope is currently jcNTUserFolder, running as pcgi behind IIS. I'm making an intranet for 100-200 people, with offices on three continents connected via VPN. It would be very cool to be able to delegate all password worries to NT. cheers, -- jean