I just got in this morning and was surprised to see the interest in this! I have not tried Brian's suggestion yet. Don't know much about ADSI (We're still an NT 4 shop as far as domains), and don't have too much time to research. Since the people who will be doing this won't have Domain Admin rights, it may not be what we're looking for (someone mentioned that being an issue?), but I will certainly look into it when the time is right. I think I may try the SHOWGRPS and see how that works. Thanks guys!!