I used smbgroupedit and it makes the mappings, but I still get: [2002/12/02 12:28:13, 2] auth/auth.c:check_ntlm_password(261) check_password: authentication for user [test1] -> [test1] -> [test1] suceeded [2002/12/02 12:28:13, 0] rpc_server/srv_util.c:get_domain_user_groups(342) get_domain_user_groups: primary gid of user [test1] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that