Got that passwd sync to work right. Had to set Samba server up at PDC. Everything works fine now except that nobody who is guest user and has NULL Password by default can change the nobody password. How do I prevent this? here is /etc/smb.conf.nobody: [global] workgroup = SHADOWWARRIOR server string = Samba %v on %L domain logons = yes wins support = yes name resolve order = wins lmhosts hosts bcast security = user os level = 34 local master = yes preferred master = yes domain master = yes socket options = TCP_NODELAY time server = yes logon script = %U.bat keep alive = 30 guest account = nobody kernel oplocks = false log file = /var/log/samba-log.%m lock directory = /var/lock/samba hosts allow = 192.168.1. interfaces = 192.168.1.1/255.255.255.0 load printers = yes encrypt passwords = yes smb passwd file = /etc/smbpasswd ;unix password sync = True ;passwd program = /usr/bin/passwd %u ;passwd chat = *new*password* %n\n *new*password* %n\n *changed* ;passwd chat debug = True ;update encrypted = yes browseable = no [netlogon] comment = The Domain SHADOWWARRIOR Logon Service path = /etc/samba/logon public = no writeable = no browseable = no thanks, -- Marcel Kunath *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Montie House Network Greater Lansing Linux Users Group http://www.montiehouse.com http://www.gllug.org *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*