Harry Sukumar wrote: > Hi James, > > Yes I tried to do this on another machine unfortunately this didn't > work for me, good you raised this topic > > On the other machine I edited the visudo > > User_Alias PROJECT = emma, paddy, sb > PROJECT ALL = !/usr/su, !/bin/su, !/usr/bin/passwd > I see your trying to protect your users from becoming root. You do realise that with that sudo configuration a user can still run "sudo /bin/bash" or any of the other shells to gain root access. Dean