seems to me this problem could be solved by having the spool directory create 755 instead of 777 and the client directory underneath it created 777. Does anybody see any problems with this? It would prevent the creation of the link by the user and thus plug the hole. Tested this on SunOS and it seems to work okay. -- ____________________________________________________________________________ Doug Hughes Engineering Network Services System/Net Admin Auburn University doug@eng.auburn.edu Pro is to Con as progress is to congress