Guy & Leland, thank you very much for your responses.

Guy, what you described is exactly what I was hoping to do. However, I may be misunderstanding what a domain controller does. If someone logs into the domain, do they still have to log into their computer as well? I don't mind having a password for the computer administrator on the client computer and a password to the domain, as long as you don't have to enter both to access the network and the shares. If this is the case, I guess if you want to install software on the client computer, you will need to log in directly to the client computer using the administrator password for the client. This is hard for me to explain/understand (sorry), but I will take some more time to read the link that Leland gave and see if that's what I want. I guess I'm just not aware of how a domain works with client computers. One thing I have found with computers is sometimes jumping right in is the best way to learn (although it can take a long time to fix if things go wrong!).

Maybe a better way to ask this is:
If I log into the domain using a Win2000 client computer, do I still have access to the c:drive on the win2000 client computer (or will I need to log directly into the win2000 client computer using it's own password)?

I have a small office and people are used to having access to network shares but also want to play around with their own computers (it's a family business). However, having password changes enforced is becoming tedious (having to change on all computers with shares). I was hoping there would be an easier way.

Thanks again for your help.

Paul