I have a smallbusiness network that has win2k server and exchange. the server is setup with roming profiles for the workstations. with that being said, anything that gets saved in the my documents saves to the server not the workstations and all profiles have personal drives for files. As of right now all users have Admin rights(on the workstations not the server) becuase one of our major programs wont save or access data on the server unless the user has Admin rights. I would like to bump everybody down to a poweruser(security reasons). Is there a way to do this but to set these programs permissions to act as if the user was an admin eventhough they are just a poweruser. 2. if part one can be done how would i go about changing the user to a poweruser on the workstation W/O disturbing any other settings on the server or workstations. (a.k.a. so everthing will work the same just the users will be powerusers not admins on the workstations.) thanks in advance for your help B P.S. server is win2k work stations are winXP pro (all running NTFS)