Just in case there is someone that knows somthing I have not thought of......... Can anyone give me reasons why I should not, or at least try not to add a Windows Machine Account to a security group (DACL)? I have a unique app that needs to write data to a windows share on another file server and running it as a service with a domain service account is not really an option. I have never done this before but I can not really come up with a security reason not to. I have tested it and it works fine. What pitfalls have I not thought of?