Hi Sergey,

I've checked Admin Power User, User and Guest with W2K XP Pro, and W2K8.

the result is that every group is returned by the corresponding RID plus RID_USERS returns true under all circumstances.
IOW User is active only if all other or false.

Under W2K8 the Power User Group is mapped to user. (it returns true to RID_USERS only and behaves like.)

Agnes
>You're welcome. Let me know how it works for you so I may update my article.
>
>>
>>thank you.
>>Searching the web for DOMAIN_ALIAS_RID_ADMINS I found http://support.microsoft.com/kb/157234/de with a list of others.