I did say "can" and not "most definately will" since there is no mention of the AD design. We run an empty root domain model where the resource domain hold all the domain admins, protecting our root.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
