Hmm... So what you're saying is that you can't just make the group "Domain Users" a member of the local group "Power Users"? >I have also struggled with this problem. It seems one can map a domain >... > >>need kerberos support compiled in? Thanks for your help >> >>Jason >> >>