I currently pushing down all user rights assignemnts and security options via a central group policy from the AD server, this works great. I have however run into a road block, I need to define a local group for group of servers on the user rights assigments "Adjust memory quota" Lets call the group "ADJUSTMEM" so each server has this local group defined with different users in each group on each server. So when I speficy the policy I want to use the local group for that particular server. Each of these groups cannot have access to each other servers User rights. I basically want to know is there away I can specify this group using a variable in GP.