if you go into Computer Manager (on a remote machine) and drill down to: Shared Folders \ Sessions what AD rights are required to end someone's session? Does that require domain admin rights or can you grant limited rights and if so which rights?
mqh7