You should post this to web service group. As this is more related to how to deploy your app. http://msdn.microsoft.com/library/en-us/dnnetsec/html/THCMCh07.asp You need to protect the code yourself. IIS doesn't do that. -- Regards, Bernard Cheah http://www.iis-resources.com/ http://www.iiswebcastseries.com/ http://msmvps.com/blogs/bernard/