I end up creating my own encryption routine to encrypt the data prior to getting written to the config. The key is skewed and the code is obfuscated for better protection; our apps are used by our internal employees only. Any suggestions, ideas, or 'constructive criticism' are always welcome. "There's no such thing as a stupid question, only stupid people." - Mr. Garrison