There are two sets of user profiles and passwords on the server
The Framework stores its own user profiles and passwords in files VFPPF06 and VFPPF07. But the server also has its own native method of storing user profiles and passwords.
When a Windows user connects to the server they use the server's native user profile and password. But once they are connected, the Framework controls which Framework objects they can access using its Framework authorities, if the user profile exists in the Framework security files.
If the Framework web sign on is switched on, the Framework will check the browser user's password against the password stored in VFPPF06/07 (entered by the administrator).