Hi, I am running samba-3.0.25rc3 in Tru64 5.1B. I compiled Samba source with --with-winbind switch. My goal of setting up Samba is to allow existing windows user login this Tru64 server without further asking password if they have alraedy logged in windows, yet with additional user control by adding a line "valid users = ..." in each directory section, that way Samba won't allow every logged on windows user login, only allow windows users that listed in the "valid users = ..." line. Therefore I thought joining Samba to the existing NT domain and also adding a line of "valid users=..." in smb.conf may be the solution. However when I tried to connect existing NT domain, I got an error: # ./net rpc join -S 172.10.40.63 open_policy failed: NT_STATUS_ACCESS_DENIED Password: Note, I didn't compile Ldap and Kerberos into the Samba. I welcome any idea about to achieve this goal. If joining the existing NT domain is a must thing to do, then I may be most probably need to compile Ldap and Kerberos in Samba. If this is the case, do I need to further configure OpenLdap and Kerberos in Tru64? If Openldap and Kerberos is not needed, what should I do to join existing Nt domain? I m very appreciate for every suggestion. Thanks S