looks like that bug in usercreate() is that limitation in the .openDSObject command.

Basically, if you already have a valid security token with the computer, it appears that .OpenDSObject ignores the given userid and password to make the connection with.

this tosses a nice wrench in to my thought's for my UDF library