Hi all We currently have policies in place which restrict which accounts can log on as a service. Because the SMA_CTXUser account is a local account and the SID will be different for each server how can I add this to the policy? I could add the power users group but of course this grants other members in this group the ability to log on as a service. Ideally what i'd like to do is run the Citrix Print services as a domain account but I need a scripted way to do this across all servers. Anyone had any luck with this? Another option is to set the services to run as a local system accounts but again this is not ideal. Malcolm