i suppose you could pull a directory which gives you the usernames and script it so it either rewrites passwd shadow group and gshadow directly or runs through adduser and passwd..you could implement a default initial pw and have them change at first login...chuck