Hi MightyR1: I'll look into security templates, but it sounds like using a sledgehammer to swat a fly.

Howard: Unfortunately, since almost all the servers are stand-alone and not domain members, we have to deal with local accounts. These include administrator accounts, developer accounts, third-party business accounts, and sometimes even customer accounts.

Of course, we have a written password policy in place in the company, but limited legal means to enforce that policy to non-company employees. Again, it is the problem that 10 percent of the users generate 90 percent of our headaches.

Any other ideas while I'm looking at security templates?

Thanks,

Mark