Of course you can. If you give someone "ALL" then they can do *anything*. It is useless to try subtract things from ALL since there will always be a way to get around the restrictions. If you don't trust the people you give "ALL" to you have more problems than sudo can solve for you... - todd