I've never been 100% certain in regards to under what user a logon script is run as when it is called via a group policy ? (for this example its a Windows Server 2003 network with XP clients). Does a login script run under the account of the user who is logging in, and therefore come under the effect of the various rights that they have localy on their PC ?. For example if they are just in the local users group and a script calls for files to be copied to the local PC will the copy fail ?. Thanks