It IS a logon script - but it is an admin script too. See as I posted earlier it runs so fast so I have it run every time at user logon. But it is an Admin type of script. It is almost there. Come on Chris. I can't see why it isn't pulling that info. the samAccountName always mateches the @USERID's in our organization.