well i'm now making all the key users members of the account operator groups so i can get rid of the permissions problem [Smile] (sneaky eh?)

i posted here because i didn't want a ADSI solution....... i just can't see anyother way of doing it atm

i can use net user to set a password i just can't get a command util that comes with NT to set the password expires flag - any ideas?

does net user $username /active:yes /domain clear the unlocked or just clear the deactived? flag?

i'm asking this because currently we are not using any password controls so i can't get the account lock out flag to be set to test........

if i can use net user i'd be very happy

my ideal solution is that i can use net user etc for evertyhing and not adsi so i don't have to install DCclients on my NT4 machines

thanks for the bump [Smile]

Regards

Pete