hi according to this document http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distsys/part5/dsgappe.asp NT Domain Controllers have $SID-516 so what about samba? does my Samba Domain Controller (PDC) really need this -516 RID or is a RID of -515 enough (Domain Workstations) i ask because i want to use my PDC as conform as possible to the old NT PDC thx in advance greez -- "Matrix - more than a vision" ************************************************** Michael Gasch Max Planck Institute for Evolutionary Anthropology Deutscher Platz 6 04103 Leipzig Germany **************************************************