Unless you want them to be able to remove the system .login (ie. give them flexability)... (shhhh...I know, we're not supposed to talk about users who know what they're doing...after all, they might turn into.. <shutter> unix wizards) John :)