You should not use local logins at all. Do the following:<br><br>- Create a domain global group for the users you want to have local workstation administrative priveleges and populate it with the users IDs.<br>- Log into each workstation as the local administrator and, in the local user manager, add the domain group to the local administrators group for that workstation.<br>- Reboot each workstation<br><br>Now any time any member of that grou[ logs into the domain from a workstation, they will have local administrative priveleges on the machine but normal user priveleges on the domain.<br> <p> Jeff<br><a href=mailto: masterracker@hotmail.com> masterracker@hotmail.com</a><br><a href= > </a><br> Of all the things I've lost in life, I miss my mind the most ...