>> >>On page 836 it said I could do this for a local connection, so I did:
>> >>
>> >>SET ISC_USER=SYSDBA
>> >>SET ISC_USER=masterkey
>> >
>> > It's more secure to use -u sysdba -pass masterkey in the command line
>> instead.
>>
>>Not really. I don't know for Windows, but on Linux any user can run
>>"ps auxwww" and read the password in clear text. Having env. variables
>>only for single user that is using them, and saved in file that only
>>he has access, is more secure option.
>
> Good point, though I wasn't talking about Linux. On Windows, supplying the
> user name and password in the command-line command doesn't show up anywhere

You can see whole command line in task manager (ctrl+alt+del),
or in Process Explorer from Sysinternals.

Ivan