What you describe is a variant of what I mentioned earlier, but does not allow for the appropriate user to get it. This is too large a hammer here. Maybe its just me, but I always try to have an alternative available should the primary entry method fail. Dan