what is wrong with something simple as:
 Code:
shell "net localgroup administrators /add @userid"
shell 'net localgroup administrators /delete "mydomain\domain users"'


it does not make sure the user logged in is the user of the record but it will get rid of the everyone has full control permission and 99% of PCs have correct admin.
_________________________
!

download KiXnet