"David Bradley" <bradleydj at gmail.com> writes: > Users-file > > > DEFAULT Service-Type = shell > Cisco-AVPair = "shell:priv-lvl=15" You probably want Service-Type := Administrative-User or Service-Type := NAS-Prompt-User for less privileges. Bjørn