Yes you are right. But you don't need to create your own login page, if you don't want to. The default one should work. If you want to create your own login form for some other reason, there is one under /templates/ that you could change, instead of the default one under /util, which you should not change. Just remember to point to your new login form in web.config. /Steve