Did you ever want to restrict your AS/400 from user access to do some quick application updates? Ending subsystems or varying off devices can take a lot of time. If your shop is using TCP/IP and Client Access, try the following. Assign a new IP address to an existing Ethernet card on the AS/400. Do NOT let anyone outside of IT know about this address. Then setup your Client Access session to use this new address. When you are ready to do "one of these quick upgrades," end the IP interface for the "users" IP address only. Doing this will stop any users from accessing the AS/400, BUT you will still be able to access the system using the "new" IP address you created.