Jon,
That is a very broad scope since "their respective right's" could be construed to include ACLs on files and folders. If I remember my MCSE classes, those are stored in the directory structure and not the SAM or AD.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
