Having got a little further through the debugging session, I now read in the manpage for smb.conf that Windows NT doesn't supply a password to Samba. My backup server is WinNT and needs access to the Samba shares to back the data up; it's also the PDC, so is theoretically the source for password confirmations. How does this one work - can a PDC in fact supply a password for itself, or should I be asking if there's a more secure way to grant it access than using 'hosts equiv'? Many thanks, Vicky Clarke