Hi, In looking at NTUSER.DAT, it seems that the permissions associated with some of the SIDs are:
0x000f003f Hmmm, here is one of the entries: 0x0014 003f 000f 0101 0000 0000 0005 0012 0000 Which seems to be: ACCESS Denied, No Propogate Inherit, All Access, S-1-5-4608 Does this seem reasonable? Regards ----- Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
