Hy, In which log can we see when the root password has been changed???, i cant find it in /var/log/messages, when i used debian it has a file callled auth.log where u can see when a passwd has been changed, is there something similar in SLES8 ??? Thnx a lot for ur help m8s.