Yes, and I am sure there is another way (i.e., some generic policy I have to learn how to use) and I know I can do it from policy editor while the user is logged in but that's not any way to do it...I'm sort of in a hurry to get it working and protected...and very new to NT. The script seemed so perfect...

Thanks for any help in advance!