I don't understand why you would do this since it would also fail step 5a.<BR><BR>I tried to switch the domain local group to a global group, but I was unable to using DSMOD (option is grayed out).