@Ted Clayton - the ability to determine exactly what was used to gain access is not always evident, but the fact remains, the SQL credentials are in a known location and often. through inexperience or carelessness, not as well protected as they might be. There now Ted, will you accept that statement without requiring the Spanish Inquisition?