Yes, I do log to the domain. The script just bypasses the group logic. Yes we are in a W2K domain environment.