Is it correct to say that orphaned users don't have an instance login but do have a db login and that loginless users have an instance login but not a db login since that goes via the application that impersonates a user?
There's no such thing as a database login (not in 2008 anyway)
Orphaned users are ones that should have an associated login, but don't because of the DB being moved. Loginless users never had an associated login and shouldn't have one.
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)SQL In The Wild
: Discussions on DB performance with occasional diversions into recoverability
We walk in the dark places no others will enter
We stand on the bridge and no one may pass