I am trying to add a domain user to a local group based on this acticle http://www.microsoft.com/technet/scriptcen...04/hey1008.mspx I thought i could do this $objGroup = ObjGet("WinNT://" & @ComputerName & "/" & $level) $objUser = ObjGet("WinNT://" & $domain & "/" & $user) $objGroup.Add($objUser.ADsPath) that works for a local user, but when i try to do a domain user i get I'm assuming thats because it needs my credentials to check that the user exists....how