Thanks for the responses. This response from Robert Laing sounds like exactly what happens during the install. <Snip> If an ID exists in the NAB, during the install the client will detach the ID file from the NAB and save it locally with the default name of user.id -- the password associated with this ID would be the password assigned when the user was created. If an ID does not exist in the NAB, an ID file must be provided when the client initially connects to the server. If no ID file is provided during installation, there can be no connection to the server. <End Snip> Patrick - I'm thinking this is the first time it's happened. It hasn't been brought to my attention before. I guess there is a 'security' hole here since any user's mail file could be 'configured', and the user.id file imported from the NAB with a default password (from the user registration) can be used to access the mail file. Regards, Jerry Gerald Kern IBM Certified AS/400 RPG IV Developer & RPG IV Programmer MIS Project Leader, Lotus Notes/Domino Administrator The Toledo Clinic, Inc. 4235 Secor Road Toledo, OH 43623-4299 Phone 419-479-5535 gkern@xxxxxxxxxxxxxxxx ***** This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.