It's part of a test/reference kit, so not part of a day-to-day working system. The kit has not been used for a while, but is about to get used in the future, with some duplicate test kits to be created too (1DC + 2 clients). Noone left knows much about its configuration - I have the lovely job of finding out....! My only safe plan so far is to borrow a temp pc, make this a secondary root domain, upgrade original machine then replicate back. I'd like to leave the conguration info in a better state for the next guy though, so, anyone here know how to start capturing all the necessary dc info? Again - Is it "simply" a case of scripting the OUs, groups, user accounts plus exporting the security policy? Ta.