I have PHP loaded as ISAPI, not CGI. I originally had PHP installed as cgi. When I have a script that authenticates a user, it never authorizes them. I have set the permissions in IIS to only allow Anonymous access. The other two options are disabled. I have tried all the different security option I can think of. The script works fine on Win98, Xitami, and PHP. Any ideas? Shane