i am sure this one has already been asked 'seven million times' but .. want to leverage the restrictied groups, such that policy dicates that certain global groups are added to 'local administrators' group of machines to which policy is linked. common issue is that to define this policy causes issues with servers some of which have non-standard security and removes anything not defined by the policy. just wanted to check no recent extensions to the client side processing of GPO's such that we can now set this policy in some sort of 'merge' mode whereby listed groups are merged with existing entries. it is just that i read somewhere on an acquistion by MS of a 'Desktop standard' in which said capability is functional. GT *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************