I was doubting if I saw your solution, because my users are not member of the local group "Administrators" but member of the global group "Local Admin WS" which is itself member of the local group "Administrators".

So, actualy what I wanted to say is, that even if the user is bidirect member: YOUR SCRIPT IS WORKING

Thanks a lot - this problem kept me busy for a few days.

Cheers,
Mario