Thanks for all your replies. Will try using ini and update.

NTDOC - I should have explained it better. Right now our master image has the LocalWrkAdm group in the local administrators group and everyone on our network belongs to it. I ran into problems where users maps to other user's C$ to share data. This is fine except when the other user doesn't know about it. So now we want to remove all users from the LocalWrkAdm group but before we do that we want to give the logon user admin permission to that PC. Removing the user from local admin group is not important right now.

Hope that clear things up.

Thanks

Ryan