> Don't tie it to the user name. In some cases (i.e. LDAP) it would be > much better to add another multi-valued attribute like "NTDOMAIN". That > way we could use that account for multiple domains, or move domains > easily. good idea.