IIRC, the @PRIV evaluates the domain rights first. Thus a domain user that is a local administrator should be @PRIV='USER'. For more granularity you can always evaluate the INGROUP(@WKSTA+'\Administrators')
_________________________
There are two types of vessels, submarines and targets.