Ray- I've not heard of that one-if you don't have Restricted Groups somewhere in there, then I'm at a loss. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Ray Lewis Sent: Sunday, December 17, 2006 6:38 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Domain Admins are not Local Admins Hi Guys Not sure if this is exactly GPO related or whether the domain GP is screwed, but when a computer joins our domain, the Domain Administrator and members of the Domain Admins Group are added to the local machine as a Debugger User. By default, these should be in the Local Admins group. Restricted groups within the Domains Group Policy is not active.. Any ideas? Cheers Ray