If you still have some doubts about the impersonation, then the Security guy might give you a hand. http://www.pluralsight.com/wiki/default.aspx/Keith.GuideBook/WhatIsImpersonation.html[^] One of the examples is to use the Word application at the server side which is quite often asked recently in the forum. Basically, the ASP.NET process identity does not have the permission to active the Word application, so you may want to run your ASP.NET application under a window account who has the permission to start the Word application.