thanks for quick reply. may be I'm not express myself clearly,key point of the question is how to change authrization for different groups.I have groups(administrator,department manager and employee).'adminstrator' have all rights of auth for every employees in whole organization;'department manager' can register for all employees in his department and only can change,retrieve or reset password for 'department manager' and can not change,retrive or reset password for all employees of this department;employee can not register but can change,retrieve or reset password for themselves. administrator auth management can be done throgh appadmin interface. how to disable registration for group 'employee' and enable registration for group 'department manager'? and is there easy way to manage passwords for each group and send email by batch for department manager and administrator? again, many thanks,
Frank

