Yo Folks.. I have W2k3 AD and bunch of linux hosts. All Linux configured to authenticate AD users. Now I need to put some restrctions in place so not ALL AD users can login to all the hosts. My first thought was to use access.conf, but that does'n seem work as it doesn't recognise groups with spaces(Stupid M$). I am sure some of you might have handled this already. Looking for hints from you guys... thank you in advance.. Cheers, LA - - - - - - - - - - - - - Go OpenSource!! - - - - - - - - - - - - -