I have been using this for about 10 years for management reports but I don't allow the users to create their own queries because most users are not technical enough to create a query. I create the query and then I have the users refresh the query and it works well. My spreadsheet have multiple worksheets and they use the refresh all feature to update all the supporting spreadsheets. The queries look for the parameters on the main worksheet sometimes in hidden fields. Using this method the user is only prompted once for each parameter. I also use a DNS less connection so they don't have to setup an ODBC driver and I use a generic user on the SQL end. I limit what they can see by creating views that only the generic user can use.:)