Hi, we use the jcifs filter in an application with about 10.000 user sessions per day and there is no performance penalty. i think jcifs does not authenticate every request against the domain controller. so mapping only one entry-file to the filter would not bring the benefit you might think. hth paul