Ok Howard.
I agree about everything you said. My plan is the same with creating a new Sid key and point the path to the old profile, and then run SubInAcl and so on.

MY PROBLEM NOW is the value SID under the users SID key. I cant understand how that is created.
If I take the sid and write a reg_binary it doesnt be the same as if I log in with the user and let the system create the key.

You write that key in yoy Perl script with a value $NewBinarySid. Where do you get this value ?

If this value is not correct it says Unknown account in the profile list under This Computer.

/Mima