Thanks for that prompt reply NTDOC.

I've never come across putting computers into groups before. That opens up a whole new level of control! I'm commonly asked, for example, to exclude rooms from internet access. I presume that this'll work as it's a deny which then takes precedence over any allow! Cool!

I cobbled together [with help!] a script to assign printers to rooms... what i'm saying is I'm a noob

I don't understand what your saying. Can you give me more detail pls?

Thanks a lot

Mark