Hi, you could use pam_group on the hosts where you need it. See http://wiki.debian.org/DebianDesktopHowTo Cheers, Christian