Thanks, Brian for your comments and input. - Definitely a good input and always good to keep security high-up in view! However in the secure corporate environment and with a lot of developers (not always doing what they are requested), the need to "enforce" something is more emerging... Thus I would like to re-iterate the question and ask for your suspicions (as you mentioned you might have some) and/or others, if anyone can see why this is not working as I was assuming it to work... Thanks and best regards, Frank