and if you setup file shares instead of disk shares, you could set protections from the server side a lot more granularly and reliably using ACL's than people thought.
A VAX had to be tpretty badly beat up if I couldn't coax it into life.
we had a DEC training course taught on-site a while back. they had lent me a VAX4000-60 desktop VAX to play with, which I promptly claimed as me own. Well, they reclaimed it for the course, but I had rendered it unbootable - unless you knew what I had changed. it eventually was returned to me (hee hee!)
and that's in the 10+ years that we were primarily VAX in the data center.