ok, just to make it clear ... 1) what does "net groupmap add" do ? 2) can it be used with ldapsam ? 3) if I have local unix group and I want to create new domain group mapped to that unix group... do I have to explicity specify SID ? can anyone give me an example of correct usage "net groupmap add" ? 4) what "type" (local|domain|builtin) should I use in such case ? 5) how does it work ? by calling "add group script" command or not ? Cheers, Ilia Chipitsine