Howard Chu wrote: > More specifically, if you want the account to be disabled X days after > the password is changed, you just need to set shadowMax to X, that's > what it's for. There's no reason to modify the shadowExpire date at all. > Why create more work for yourself than necessary? Thanks a lot! This makes my life much easier ;-) Michal