I never would have thought of that - I should be able to use admodify to bulk hide the groups from the GAL.
Be interested in any other options simply as it's always good to know there's more than one way to skin a cat, but that sounds like a plan so thanks for that Brian. Michael - A typical example is a folder gets created for a project, group(s) gets created and assigned to the folder permissions, project dies and gets deleted, groups don't. Sometimes it's my fault, sometimes it's a subfolder of a top level folder so the users delete them - most of the time my naming structure makes it obvious if a group is still relevant, but it would be good to have a "cooling off" period before deleting. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
