Beats me. After all, DCOM relies on the LSA private data functions at the moment, as passwords are stored in there. Of course, you could CryptProtectData something, and then store it using LSA :) I recently saw gadgets which combine a CF card reader and fingerprint scanner, or in one case a HDD and fingerprint scanner. That's my idea of security, although to be really safe, I'd want the scanner to be able to measure the O2 level in the finger as well, to be sure it wasn't chopped off. Paranoid? Me? Who's been talking??
Steve S Developer for hire