Good point! And thanks - that was better than getting whacked with joe's big stick ;) *hides*
-----Original Message----- You should never modify the Default Domain Policy, instead create a new one. Jared Manhat Systems Administrator Accutest Laboratories List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/