Chandra mohan <cmohan_n at yahoo.com> wrote: > Is it possible to use "Service-Type" attribute for > this purpose, with "Login" value for normal_user and > "Administrative" for admin_user. Please clarify. Yes. To a large extent, your client can interpret the attributes however it wishes. Alan DeKok.