Andrew, It seems that this problem only occurs if you use samba with an ldap backend ... Is it possible that the password is stored in a wrong encoding by samba on the ldap server? Can I debug that machine logon process somehow more deeply? regards Martin