Kent,
Have y'ever gone moose hunting? Reading you reply is like trying to follow a moose's footprints in the snow. [Eek!]

kyosei,
If I understand you correct, you want to modify the User Manager property "Logon Workstations" on the fly. First problem... unless the user's a domain admin, they can't do it. That said, there is an ADSI IADsUser Property Method property called "LoginWorkstations" that could do it for you albeit not on the fly. The reasoning is that when the user is in the script, (s)he is already authenticated.

If an ordinary user need trigger the request you'd have to hand it off to an admin "proxy" script for processing.

Maybe if you could fill us in on what exactly you're trying to accomplish we may be in a postion to better advise.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.