OK, to solve my own problem, to do this the group has to be created as a "domain local" group and not a "global" group. Sure, that makes sense :-\ -- Damien McKenna - Web Developer - Damien.McKenna at thelimucompany.com The Limu Company - http://www.thelimucompany.com/ - 407-804-1014 #include <stdjoke.h>