sure would be cool to find out that there is a unix-way to set a enable/disable account bit for a user... There is. Change their login shell to /dev/null and change their _encyrpted_ password text in /etc/shadow to something like "***no login***" (or any other text that can _not_ be output by the crypt(2) call). These changes keep someone from logging in, but won't affect current sessions. Craig