Whoops, I am wrong. That's what I get for replying early in the morning. What you really want is: myuser mymachine = (ALL, !root, !#0) /usr/bin/pwd It is not meaningful to have the !root alone since there is nothing in the list to subtract root from. It is not really a boolean. - todd