Depending on their environment, the VPC environment may have to be joined to the domain, and the user would have to have a valid account on the domain. Jim