Actually, AIX has quite good auditing features for Unix. It can include quite a bit of detail, including what commands a particular user is using and at what time. Almost noone uses the entire auditing features because it gives too much information and can slow the system response time noticably. Tim [Quoted Article Deleted] -- Tim Walding Internet: walding@tkg.com The Kernel Group Consulting and Tools for AIX and beyond... http://www.tkg.com/