Thank you for your response. The kb doc wasn't really helpful because I believe I'm beyond that point though I appreciate you sending it. The webservice works fine via a soap call from ASP 3.0 when <allow users="*" />. I am unable to secure it however - which is what i'm working...