Purely out of interest is there any reason why a modified version of this code couldn't be used to crack the administrators password? For example technically every time you catch the error from an incorrect attempt you could increment the password (brute force style) and then try again in a big loop. the second you're sucessful you'd know the admin password. Might try this in a bit...is there any reason it wouldn't work? If it worked it'd allow anyone who can log into the system as an level user to break administrator access. And while it's all local and data doesnt go over the net, the cracking speed would in theory be phenominal