Hi , As the scenario, have two domain in this site , one is Win NT4 domain, and the second one is Win2K AD, NT4 domain have a one-way trust to Win2K, all of user account use clonepr(ADMT) to clone SID from NT4 to Win2K, all of the user right are same...