There is a windows xp computer on our windows 2000 domain. The user has removed domain admins from the local administrators group. I am one of the domain admins. I do know how to create custom group policy or custom registry entry. But, I don't know where in the registry this might be located. I think I have found, using whoami /ALL, the correct SID to enter. We do use kixtart as well and I am familiar with that too. I can't allow the user to know what I am doing or log directly into their pc. Help Please.