Rick - after modifying WC.INI to specify an AdminAccount, whats required for the changes to be used? Stopping and restarting the website?

Also, i see that basic authentication is turned off for the site. Turning it on does not affect anonomous access does it?

I have AdminAccount in WC.INI set to a user account value, but i can still hit "maint" URLs without getting prompted for a login/auth screen. I am using a URL like...

You shouldn't be able to access any of these urls without a user name in production. In development you can leave the AdminAccount to empty and that should allow you access the admin pages without a password.

Not a good idea however. You should use ANY to require a login - any login.

+++ Rick ---

/wconnect/wc.dll?_maintain~ShowStatus

What am i missing?

---