Okay here’s my problem. I’m scripting in over 3000 user accounts. In our environment we run both w2k pro desktops and W2k terminal services. The users will be logging onto thin clients and PCs. Because of this we have opted to use the terminal services profile option for our user accounts, thus ensuring a higher level of control when our users logon to the terminal servers. I am using the addusers.exe that comes with the W2k server resource kit to script in the accounts(I liked it better than the VB scripts). The script works fine however when the user logs on for the first time, and a profile is created on the server we specified for the terminal services profiles, it sets the ACL for that profile to only allow that particular user access to the profile. We need administrator groups to be able to access the profiles as well. Taking ownership only results in the original user being deleted from the ACL, which defeats our purpose of having the user and administrators being ableto access the profiles. The solution I am looking for is very specific: I need the ACLs for the profiles to allow the user that logs on and Domain Admins access to that profile. Thank you all for your help.