hmmm, and it would be extra-special nice if you could make it easy to use - I don't know about you, but I think these WMI and ADsSecurity objects are terribly overly complicated.