Brian, You wrote "A domain admin in any one domain in a forest can easily be a domain admin in every domain if [s]he wants to be."
Could you please explain this? Perhaps you are including the root/parent domain also. In any case I will like to know how is it possible? (I have modified the subject of the thread a bit.) Jay ___ Jay Kulsh So. Pasadena, CA ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
