This is very odd. I updated a user's workstation yesterday. This morning, I ran lastlog | grep -v Never, and it shows only another admin and myself, and that's from days ago, but not the user. It shows her as "Never logged in". Meanwhile, last does indeed show her logged in (though not today). Anyone have any ideas? mark