To go little deeper into suggestion rgbeen's suggestion...
I am using a similar approach with much more functionalities
1. I open an invisible form for this purpose with a private data session at the beginning just after login with parameters of login ..
2. Open the Password file in the DE.
3. Check for the user/password and lock the record.
4. Dont release the form which is invisible. Continue with other forms etc. and release it only at the end of the application.
You can have a field for flaging with operation type. For example - data backup, restore, period end processing etc. operations are done after writing a flag in the flag field. This helps to let know all users some system operations status. Also helps to stop any user from loging in. This I do by locking all records for critical system operations or warning to avoid doing such critical activities, if others are loged in.
So mutiple purpose can be achieved in this way. In fact I use this for much more functions not explained here.
Hope this gives you some more insight into this thinking and I have been of some help to you.
ramani

(Subramanian.G)
FoxAcc
ramani_g@yahoo.com