When you add the domain, you check (or leave uncheck) "Enable Shell
Accounts". I'd think that if you don't check "Enable Shell Accounts"
that your admins cannot make that option.
Your siteadmins are the "super users" for the site; it's reasonable to
allow them to make decisions as to whether or not to allow shell access
for individuals if you've installed it for the sites.
Jeff
--
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA 92517
voice: (909) 787-8589 * fax: (909) 782-0205