Hi All,

I had written last week about 5788 amd 5789 errors on PCs
on my newly upgraded NT$ -> 2003 AD.

I found out that if I freshly join a domain, this problem
doesnt happen.

I examined the security info on the computers and see that
newly joined domains have different secuirty rights <for
instance in the security the SYSTEM group has full rights,
while on the PCs that were in the NT4 don't even have the
system group listed)

Short question, how can I change the rights on all the pcs
in the domain? I looked at creating a group policy, but
the security objects are different than those in AD users
and computers -> computers -> properties on the computer

any ideas?