Hi to all, i succesfully migrated an nt4 domain (with windows xp, 2kpro and nt4 workstation client). Now we are running samba with ldap backend on two Gentoo-Linux boxes configured as pdc and bdc. All went smoothly, but i have a couple of unresolved minor issues. The first is with user manager. When i try to set "user cannot change password" flag in the user properties i get an error. The error is "the function is not correct" (i'm not sure if it's exact becase i translate it from italian). The second issue is with the set primary group script. If i leave it in smb.conf i have two problem: - NT4 workstation cannot succesfully join the domain. xppro client and 2000pro can join successfully the domain - the function set primary group in user manager doesn't work (this is not a big issue for me) If i comment set primary group script in smb.conf i'm able to join domain and to set primary group with user manager. It is safe to comment out this directive? It's required in some way? Regards, Samuele