ok, cn=users group has an ldap entry, as you can see below... # Entry 1: cn=users,ou=Group,dc=INTRANET dn: cn=users,ou=Group,dc=INTRANET cn: users userPassword: {crypt}x gidNumber: 539 objectClass: top objectClass: posixGroup objectClass: phpgwAccount phpgwAccountStatus: A phpgwAccountType: g phpgwAccountExpires: -1 I can type net groupmap ntgroup="Domain Power Users" unixgroup=bin and it will work, but it will not do it to unixgroup=users, but why? I used phpldapadmin to do it manually, but it ends up only doing this net groupmap list Domain Power Users (S-1-5-21-4070452498-3149834983-2923667569-1201) -> 539 still not mapping it to the group, like the one down below does Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> ntadmin here are the exported entries of both groups, so what is the problem? # Entry 1: cn=ntadmin,ou=Group,dc=INTRANET dn: cn=ntadmin,ou=Group,dc=INTRANET objectClass: posixGroup objectClass: sambaGroupMapping cn: ntadmin userPassword: gidNumber: 504 sambaSID: S-1-5-21-4070452498-3149834983-2923667569-512 sambaGroupType: 2 displayName: Domain Admins description: Local Unix group # Entry 1: cn=users,ou=Group,dc=INTRANET dn: cn=users,ou=Group,dc=INTRANET cn: users userPassword: gidNumber: 539 sambaGroupType: 2 sambaSID: S-1-5-21-4070452498-3149834983-2923667569-1201 displayName: Domain Power Users objectClass: posixGroup objectClass: sambaGroupMapping description: Local Unix Group i seem to be so close to getting ldap working with samba:) users and all work, I just need to get these mappings and i can switch for good over to ldap from smbpasswd. _______________________________________________ No banners. No pop-ups. No kidding. Introducing My Way - http://www.myway.com