Please try the batch file from the post Les pointed you to. It works great for us. We still use it as we move forward with our migration from NT 4.0 to 20000

Also use NTFS permissions to keep out everyone except the appropriate users.