I'm trying to set up a group (Help Desk) that will only allow a few "show" commands, but restrict everything else - I'm unable to get this working. Can this be done, and how? I've got the user and group priv levels set to 0, I've also go the 2 "show" commands permitted and everything else denied...but it's still allowing this test user to enter all of the denied "show" commands????? Thanks in Advance!