Thanks for your reply Adam, I solved the problem by removing the force group parameter. As for other quirks, I had to put the domain in before the user or group. Thanks, Matt Delves