That's what I did and it still came unlocked. That's why I am worried about where the users file is and how I can monitor exactly who is remotely connecting. I am worried that perhaps a UUCP or LDAP connection or something which would slip by the firewall could be in use...

Or even maybe I just have an account somewhere which requires no password.

Remember this is an employer who handed me this machine without the disks and they had all the time in the world to set it up however they wanted. I have changed my password... I am just worried there are other accounts, programs or even some strange anonymous user with some sort of stealth connection has access...

I am asking these questions because I don't know. And the more I look... BSD seems to have a lot of possibilities... and Mac OS seems to have changed things around enough that there is so little documentation floating around to make deciphering it very hard...