Can you change the authentication to Windows, eliminating the need for a separate ID and password? Use groups to control access to specific dataabses and tables. That would be my choice, as it eliminates the need to maintain SQL ID's in addition to LAN ID's.