Hi my problem is that i want to assign a user "intallation rights", so that he or she can install s/ws on any machine in the domain. i've created an ou called staff, a security group called staff and no.of users. i've created a group policy also and specified everything that i want to control such removing tools->folder options in windows explorer. everything is working fine, but i could not assign installation rights to my users unless they are member of admin group. In NT 4, User Manager for Domain (Window) Policies (Menu) User Rights (Option) load and unload device drivers we assign any account/user this right and installation can be done on any machine in the NT4 domain. In Windows 2000 there is the same option in the group policy Computer Configuration Windows Settings Security Settings Local Policies User Rights Assignment Load and unload device drivers i added the account and group also but it did not work. i added the same account for the right Change the System Time but it also did not work, although other settings in the User Configuration such as adding the Log Off in the start menu are working fine then why Change the System Time doesn't work. I think if this will work then load and unload device drivers will also work. help me

It may be the following. If you have configured these settings in a Group Policy at the OU level then the computers for which you wish to have the people preform these tasks must also be located within that OU. The "Computer Settings" portion of a Group Policy apply to the computers contained within the container (Site, Domain or OU) that they are linked to. You might try configuring the Domain Security Policy Start>Programs>Administrative Tools>Domain Security Policy with the same settings and adding the group there that you wish to have these rights. Or, add the computers to the OU where the other policy is already created. Remember that if configured at the Domain Level it will apply to all computers in the Domain. Hope this helps. -MW