OK, same issue as the dumb one, but this is a problem of understanding rather than 'blindness'. I've never really got how GPOs 'merge'. I have a GPO, applied now to all servers, which states "Only on session per user". I want to disable that GPO for one user, 'demo' (Who, for convenicence, is also in his own OU, and his own security group). What I've tried; 1) Put permissions on the Allow_single_session_only GPO for the 'demo' security group. I can see this group, I can set permissions, I click 'OK' and the group doesn't show up in the permissions list. 2) Create a GPO applied to the 'demo' OU, which specifically disable the singel session value. No effect. I know I'm being stupid, and have a feeling it's something to do with loopback, or permissions, but can't get to it. Any help much appreciated, as we're mean to go public with this demo soemtime today! Nick ******************************************************** This weeks sponsor Emergent Online Thinssentials Utilities Using the latest software, hardware, networking technologies, proven technical expertise, proprietary software and best practices, EOL provides custom-tailored solutions for each client?s mission and specific goals. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm