> > 1) use a mangling system > > 2) map all $ accounts to "nobody" > > Why is #2 "nasty". it destroys jeremy's wish to see all NT accounts with an equivalent unix account. the "map username" (or map trust accounts to guest) can be seriously abused...