Does anyone know the best way to make a user that has permissions to read the Active Directory in W2K but little or nothing else? I haven't figured out how to do this with anything less than admin rights still. Regards, KAM