Thanks for the input.

Witto to quote your previous post "via a group policy in active directory." I thought I was pretty clear that we are NT4 preparing to upgrade to AD 2003. Some of these "Admin" items are in preparation for policies later on.

So back to the original question.......How about an example of the elusive impersonation capabilities.