I am guessing that you are using IBM client access. Are you using that address to connect to, via client access? Are both ip address called AS400, via the network dns? So you get the signon screen, is that correct?, top left,, the serial number of the machine is the correct one to sign onto? Since the users have been setup, somewhere there is a tube/crt connected to the AS400,,, logon there, and check the wrksysval *all,, looking at the security settings, and the way the devices are configured, atuo or not, Have a user sign on at the tube/crt.