Thanks for the quick reply Howard. Yes, the user only has read access to the key. If we had W2K clients I could apply a group policy, but unfortuately we have all NT 4 clients. I was hoping KiXtart had a secret function to do my task [Razz] . Is this a job for POLEDIT?