I've noticed lately that any new AD account I create doesn't pull the default GPO, I know it's probably a permissions issue but have no idea where to start, like what permissions are needed by default on what objects. All my older users are fine, I had a PSS support call a while back and they were messing with permissions and it's not been right since. Any info is greatly appreciated from this new subscriber to the list! John W. Cook Systems Administrator Partnership For Strong Families 315 SE 2nd Ave Gainesville, Fl 32601 Office (352) 393-2741 x320 Cell (352) 215-6944 Fax (352) 393-2746 MCSE, MCP+I,CompTIA A+, N+