I've done a large bit of updating to my NTLM documentation: http://davenport.sourceforge.net/ntlm.html Includes session security stuff, some rewrites, more details... generally more "stuff" ;) Eric