OK. It installed fine when I logged on as local admin. However...

Okay, then you have to make the domain "nick" a member of the local administrator's group for that box, and all will be well.

Many people using NT/2000 don't understand this concept, but it's really the way things were meant to be run on an NT network. The idea is simple, but it takes some explaining:

- There are two different domains involved.

- First domain: The company's domain, the one that's stored on the primary domain controller. This has all the company accounts and groups such as "Administrator" who is a a member of the "Domain Administrators" group, and "Nick" who is a member of the "Domain Users" group.

- Second domain: The local security database of that particular NT/2K computer. This domain "trusts" the bigger domain, and the domain administrators are automatically a part of its local "Admins" group.

- This also means that "Nick" is automatically a part of the local "Users" group on that box. So Nick doesn't have any rights on that box.

- If you log into the box as the local box's local Adminsitrator, then you can add the "BigDomain\Nick" user to the local box's "Administrators" group. Now, when Nick logs on to the local box as "BigDomain\Nick", then he's got admin rights on the local box, but regular user rights on the big domain.

Clear as mud?

___________
Tony Fabris