Yes, it only seems to work if the login is a local login meaning a sql authenticated account or an individual AD domain user. But when I try to use a AD domain Group, it doesn't work. There must be a work-around