I tried mapping client certificates to user accounts with IIS, which worked and gave me access, but then broke CGI apps because the environ variables AUTH_USER, etc., showed garbage rather than logged-on user names. If this is fixed in Win2000 this might be the best bet?