Hi there! I'm lost. After reading many pages about this - which all seem to say the same - I still don't get it to work. Samba 3.0.22-13.18 64bit openLDAP 2.3.19-18.10 # net groupmap list Domain Admins (S-1-5-21-3842594120-1922355106-3159979546-512) -> Domain Admins Domain Users (S-1-5-21-3842594120-1922355106-3159979546-513) -> Domain Users Domain Guests (S-1-5-21-3842594120-1922355106-3159979546-514) -> Domain Guests Domain Computers (S-1-5-21-3842594120-1922355106-3159979546-515) -> Domain Computers Account Operators (S-1-5-32-548) -> Account Operators Backup Operators (S-1-5-32-551) -> Backup Operators Replicators (S-1-5-32-552) -> Replicators Web Admins (S-1-5-21-3842594120-1922355106-3159979546-3005) -> Web Admins Print Operators (S-1-5-21-3842594120-1922355106-3159979546-3009) -> Print Operators Einkauf (S-1-5-21-3842594120-1922355106-3159979546-3011) -> Einkauf Hauptbenutzer (S-1-5-21-3842594120-1922355106-3159979546-547) -> Power Users The LDAP group 'Power Users' shall be mapped to the Windows XP 'Power Users' Group. As I'm using a german Windows version, I tried to name the group 'Hauptbenutzer' which doesn't work as well as naming it 'Power Users'. What I expect how this schould work: I add a User to my domain-group 'Power Users' and they are automatically added to the local 'Power Users' group on the workstation. This doesn't work. Yes I could add the domain group manually on each workstation to the 'Power Users' group but this isn't automatic enough ;) Any suggestions? Regards Manuel