Just following up on this, all is working except I'm not sure what I need for syntax in referring to an AD group with a space in the name, i've tried: Internet Access 'Internet Access' `Internet Access` Internet%20Access all without working and "Internet Access" refers to an external file. What have I missed?