Legacy applications are making the upgrade to Windows 2000 difficult.  My
users cannot run many programs because they attempt to write to a restricted
area of the registry or the winnt and program files folders.

I thought an easy way to solve this would be to add the Domain Users group
of the logon domain to the Power Users group of each workstation.  I could
then use group policies to make their account act more like a normal Users
group.

To avoid having to go to each workstation, I thought I would write a script
that is executed at startup.  The sample code is at the end of this message.

Unfortunately, I always get an error stating that the workstation does not
trust the domain.  I have no problems doing the procedure manually and I
have recreated the computer account in the domain.

Does anyone know how to make this work or have a better way to solve my
dilemna?  All help is appreciated.

Sincerely,
Brad Wilkins
Dominion Consulting Engineers, P.C.

********** SAMPLE CODE **********

var network_object = WScript.CreateObject("WScript.Network");

var power_users_group = GetObject("WinNT://" + network_object.ComputerName +
"/Power Users,group");
power_users_group.Add("WinNT://myDomain/Domain Users,group");

*********************************