Thank you all for your help. I think I will try the logoff.exe approach. Of course, it is not a perfectly clean solution, but clean enough for my needs and much easier to handle than LDAP. Thanks Hans Musil