you can use the ADSID interface to pull the sid of a given user...

code:
$sidobj = createobject("adssid")
$sidobj.setas(5,"WinNT://@ldomain/@userid,user")
$sid = $sidobj.getas(1)
$sid will look like this.

010500000000000515000000FD77B15654FA5551235F636BE8030000

but for easy registry editing... you want a sid value like the one returned by the @sid macro.

S-1-5-21-1454471165-1364589140-1801674531-1000

Oh the math! [Smile]

[ 02 May 2002, 20:39: Message edited by: Bryce ]