config works for me in both versions, so I'm confident it will work in 3.2.7: idmap domains =3D YOUR_DOMAIN idmap config YOUR_DOMAIN:backend =3D rid idmap config YOUR_DOMAIN:base_rid =3D 0 idmap config YOUR_DOMAIN:range =3D 10000 - 49999 We have a Server 2003 native forest/domain not 2003 R2, and we do not have sfu deployed. So the environment is a little different. James Zuelow....................CBJ MIS (907)586-0236 Network Specialist...Registered Linux User No. 186591=