David Macek writes: > Power Users don't have access to (almost) everything, like > Administrators do. The Domain Administrators group is a member of > Administrators, so unless I'm missing something, there's no reason to > have them explicitely in the DACL. That doesn't stop folks from using them in DACL entries and membership of one group in another (rightly) doesn't confer transitive access rights. I've just named these two examples because I've seen them before in ACL, I make no claim as to whether that's a sensible thing to do or not. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Wavetables for the Terratec KOMPLEXER: http://Synth.Stromeko.net/Downloads.html#KomplexerWaves -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple