I also want to add that I am finding more Active Directory user accounts that do NOT have "Self" listed with "Read Permissions" on the user account. These user accounts I am finding all have one thing in common. The "User Cannot Change Password" attribute was set for all of these user accounts. All of these user accounts may have been created from a common template. Anyway, this Active Directory domain was upgraded from a NT 4.0 domain... Another reason for doing a CLEAN install with Active Directory!

-Jason