I have 2 dlls, one is filter dll named w3AU, with HttpFilterProc defined, which handling SF_NOTIFY_AUTHENTICATION and SF_NOTIFY_END_OF_NET_SESSION. This dll has authentication function only.The other is a ISAPI dll W3RT, with HttpExtensionProc defined.It can generate some reports.These 2 dlls work perfectly...