----- Original Message ----- Yes. It is by design, for the reason that when this user is added, the administrator expects to login with it as well. If we won't add it to the users table, and set permissions to it, then he won't be able to login. I agree that with the introduction of the new admin@internal user, we can think of just setting it in vdc_options, and then if the administrator wants to add users to the new domain he will login with admin@internal, search for users, add them and set the correct permissions. But in order to do that you'll have to make sure the admin@internal user is enabled (i.e., its password is not blank). Otherwise you won't be able to login to the system.