Thank you for your reply Msnwar. I definately understand that this in no means is a workaround, merely stating the only change that would enable the remote shutdown to execute. This is all in an NT/2K/XP test Lab I have developed for my MCSE studies, which is why it bothers me why I would EVEN NEED the Guest account (or any account mind you) wide open to grant remote authority. The XP network is not a member of a Domain and the more I read into Keberos Achitecture, the more it sounds like that most all of the remote security features behave properly when their is a domain model implemented, so I am going to switch the "role" of those workstations so they must log into a domain controller. The Administrators authentication processses is limited otherwise. Thanks! any other thoughts..keep them coming!!