I have tried everything I can to find a solution to this. I can wbinfo -g or -u or even -n but when I try to use Wbinfo -r to get the group of a user it fails and gives this error Could not get groups for user XYZ Any ideas would be most appreciative. My smb.conf config follows.. Also I don't know if this has any merit to this problem but getent group doesn't pull back anything except the builtin group in ADS [global] workgroup = DOMAIN realm = DOMAIN.LOCAL server string = Squid Proxy security = ADS client schannel = No allow trusted domains = No password server = XXX.XXX.local passdb backend = tdbsam log level = 12 preferred master = No idmap domains = VALTIM idmap backend = idmap_ad idmap alloc backend = tdb idmap uid = 10000-300000000 idmap gid = 10000-300000000 template shell = /bin/bash winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes winbind trusted domains only = Yes idmap alloc config:range = 10000 - 300000000 idmap config VALTIM:range = 10000 - 300000000 idmap config VALTIM:default = yes idmap config VALTIM:backend = ad idmap config VALTIM:schema_mode = rfc2307 cups options = raw ------------------------- Brian Fertig