PROBLEM: When I connect to a server using PR-Tracker Web Client I can login even if I type in the wrong password. ANSWER: This means that you have setup security on the IIS virtural directory hosting prtracker.asp incorrectly. When you configure directory security you must only check Basic Authentication in the Authentication Methods dialog. You probably have Anonymous Access checked as well. NOTE: These instructions are for Windows 2000. Exact steps may vary for other versions NT or XP.