Why not just set their shell to /bin/false or some such. That prevents login access, and should prevent ftp access (you have to check - try man ftpd ). But it allows pop access, and imap access. Carl