I didn't get another response so I am re posting this.

Yes, they are all GroupWise users. There are about 75 other GW users. No
we do not use NFAP

The login count log shows the same 4 users logging in every minute.

are they using groupwise?

Joe Moore
Novell Support Forums SysOp