Stan, The enable or disable is a command statement for a specific DM name. If you have multiple DM's for a UNIX station, each one has to be disabled to prevent sets. The only way to ensure that they remain un-settable is to prevent someone from running the enable command. Since anyone at a command prompt (including telnet session)can run the enable command for any DM name in your system, you really must rely on the competence of your well-trained people. The specific station DM name can be locked down to prevent the un-educated from enabling sets but it is pretty much impossible to lock it down with 100% certainty. In most plants where I have worked on IA, the Operator stations for that specific process have sets enabled and other Operators are permitted to view data in that Process but sets are disabled. This is done via the environments files. It works well. But in fact, if someone with command prompt access desired, he could enable sets for the people with "view data" access in the environment files. Terry _________________________________________________________________ Take your contacts everywhere http://go.microsoft.com/?linkid?12959 _______________________________________________________________________ This mailing list is neither sponsored nor endorsed by Invensys Process Systems (formerly The Foxboro Company). Use the info you obtain here at your own risks. Read http://www.thecassandraproject.org/disclaimer.html foxboro mailing list: //www.freelists.org/list/foxboro to subscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=join to unsubscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave