hello, I have a RH 7.1 box running samba-2.2.4-2 acting as a PDC to our LAN. For the most part all our clients are 95/98 and NT 4. The problem I am experiencing is that when I want to add a Domain User to a local group on a Win2k box it gives me the error: "unable to lookup user names for display." Now, I can add myself (the one logged in) to the group on the Win2k box, but any other user I try to add gets that error message. My user is a super user that is automatically given admin rights on the machine and it seems I should be able to add more users than just me to the group just like on NT 4. If I slide over to an NT 4 box and try the same thing... adding a Domain user to the local Power Users group other than my user it works just fine. I can add as many as I please. On the Win2k box if I have the Domain user log in one time and logoff I can then log in to the Domain as my superuser and add them to the group. It seems to like the fact that they have logged into the workstation before I can add them. On a side note... I have upgraded to samba-2.2.7 on a clone of that server and still have the same problems. I would think if its not a problem doing it with NT 4 then you should be able to do the same in 2K. Of course, thats not the case right now with my setup. My question to anyone who can help me... is this this normal for 2K at the present time? Or is there something else wrong that I need to fix? Thanks ---------------- Smb.conf output: # Global parameters [global] workgroup = XXX netbios name server string = Samba PDC Server v.2.2.4 encrypt passwords = Yes update encrypted = Yes min passwd length = 6 passwd chat = *New*password* %n\n *Retype*new*password* %n\n *modifying* username map = /etc/samba/smbusers password level = 4 unix password sync = Yes log file = /var/log/samba/log max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain admin group = @ntadm add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u logon script = %U.bat logon drive = H: logon home = \\%N\%U\%u logon path domain logons = Yes os level = 65 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes hide local users = Yes admin users = administrator printer admin = @ntadm [homes] comment = Home Directories read only = No browseable = No [netlogon] comment = Network Logon Service path = /home/netlogon invalid users = bin adm daemon lp sync shutdown halt mail news uucp operator games gopher ftp gdm postgres vacation named rebound guest ok = Yes browseable = No