> Have you thought about using IP numbers to verify access ? yes, i'm using that scenario right now. but the users log on into a samba 2.2 PDC, so every user can sit on every PC which renders IP-based solutions useless. so i'm looking for a user-based solution. thx, thomas