The option I don't have - and we may be crossing wires here - is to add Active Directory authentication to a selection of users. But its by-the-by as setting the EA Password in bulk will do for now, we are looking at AD Auth with our supplier to provide a scripted, backend solution.

Thanks again, most helpful.