Li, You mentioned that all DBAs use the same OS/database account. By that I assume you are planning to lock SYS and SYSTEM and give your DBAs their own OPS$ accounts. That way you can track actions to individuals. I'm guessing that you already planned that, but I just thought I should mention it. Dennis Williams
