jean-f, you have schema entries "controlAccessRights" and "userAccountControl" which are exactly the same thing. i will remove references to controlAccesRights because userAccountControl is a more accurate name for referring to ACB_INFO.