If you want to check if EmployeeName AND Passcode match, you need to check both, either in the criteria expression or by comparing the result of the lookup with the value in the form.

The direct, boolean evaluation of the DLookup return value looks fishy to me. I suspect it will not work. So, I replaced the DLookup with a DCount.

If DCount("*", "tbl_Employees", "EmployeeName='" & Me!ChangeAnalystApproval & "' AND Passcode='" & Me!DocControlPassword & "'") Then