sorry, i failed to mention my contraints. our customer went from multiple domains to a single domain, multiple ou admin model. so the solution must incorporate the fact that i have local admin on the two boxes, but no domain rights. the solution must also include the ability to trick the domain admins...