> > > preferredOU > pure NT5 don't care now. ick. > > > > securityDescriptor > > SID+DACL+SACL but on what ??? hm. take a guess. it's a sD just like there's a sD on files, directories, registry keys, processes, objects, pipes etc etc? it outlines who has access rights to add/change/modify/delete/etc this ldap entry? just a guess.....