I wrote something recently which provides write access to the Users group. It works fine but when domain users log in to the system (I believe the machine is in the same domain as the users) they do not pick up those rights. I was under the impression that they were supposed to. Is that correct? What is really odd is that winAPI CanUserWritePwrScheme() returns true for domain users once you make the DACL change allowing the local Users group write permissions but when you go to commit the changes, they fail with an access denied. So assuming they don't and I need to explicitly provide write access to the domain users, is there a way I can grab the domain the machine is in so I can't go ahead and add the rights to the Users groups in that domain? Thanks, Tom
