Ummm, there's no need to check to see if Windows authenticated the person or not. If the authentication failed, that person would not be logged onto Windows, and therefore, there won't be a user logged on. All you really need to do is on the client side, pass the clients WindowsIdentity (use GetCurrent), to the server. The server will then have everything it needs to know about the user. Dave Kreskowiak Microsoft MVP - Visual Basic