I put an "if" in /etc/profile that checks for their username and boots them. The problem is they can still run non-interactives commands (ex. $ssh user at server /bin/ls). I would like to make them not be able to do this too. I know you can do that with a forced command but the OpenSSH book says it then won't work with scp. -Kyle