The domain user who indirectly generated 7 mails to the list today because he had forgotten to run mkgroup -d made me boil over. I would like to suggest a strong measure: include the current (domain) user in the output of mkpasswd -l . Ditto for mkgroup. What do you think? Is there a down side? Pierre