hi: thanks a lot for your explain !! i will keep an eys on vista issue, although i think we will just by pass this os. with "security = domain", the "rid" idmap backend seems the best i can get. i hope i can migrate to samba 4.0 smoothly in the future. thanks again for your kindly help!! Regards, tbskyd