Cheers. I've coded the whole thing and it works fine for me (although i am a member of the domain admins group). I've tried running it under a standard user's login (admittedly on a terminal services virtual session not a standard PC) and it only seems to allow modification of the user's telephone number, not the job title or department (whereas it modified all three attributes under my login)