On May 25, John H Terpstra wrote: > net rpc group addmem "Power Users" "MYDOMAIN\Engineers" > -UAdministrator%password -SWINWRKSTN Ok, this didn't work for me - I just got a NT_STATUS_LOGON_FAILURE... Probably a security issue (no admin access from network). OTOH, just setting the users' primary group SID to S-1-5-32-DOM1-DOM2-DOM3-547 seems to have fixed the issue. tom.