Novell has a utility called DSrights that is cmd-line where you can ask for the effective rights of an object in the tree. Is there something similar for w2k??????