First of all, I would never use wu-ftpd, only half-witted morons use that daemon, I use Pro-FTPD. Secondly, like I said this is a high risk network, but the information being copied to the FTP server and forth is encrypted (encrypted before being sent, and after), so it doesn't matter if they can get the passwords (which would require rooting one of the servers, which is damn near impossible). Thirdly, not letting users on the network is not an option, thats plain and simple. Fourthly, Samba is still in its infant stage in my opinion, it has had nowhere as many code audits as Apache or Pro-FTPD. I don't trust it. For those of you that would just tell me to shut the hell up about the users/security, I can't take the risk with this kind of data being transferred. I can't say what it is, but I can assure you that its important enough to encrypt it on the server, and store all decryption keys on cd-rws. I forgot to mention though, sniffing is impossible because the network is switched. In order to sniff the passwords, they would already have to have root on the FTP server, which is redundant as hell, because then they could just copy the damn files. And finally, you are correct, 0-day exploits happen all the time. Thus, running less services lessens the propability that there will be a 0-day exploit for the few services that we do run, in which one or more hosts will be comprimised before a patch is available. Its all about statistics, and thats how I sleep at night. Oh yeah, commercial solutions are unacceptable, looks like the user is just going to have to deal with copying the files manually.