Does that work, Andy??
Alternatively, create a .profile in that user's home directory just containing exit. Make sure it's owned by root and is read-only so the user can't replace it through[ignore] FTP. [/ignore] If you want to be nice put a brief message such as echo "Shell login disabled." before the exit. Annihilannic.