> i think i might have to add either a special info level to the samr > password API to get the password hashes Yes, this is the way NT does it. SamrQueryInformationUser info level 18 gives you cleartext nt# AND lm#. Matt -- Matthew "Austin" Chapman SysAdmin, Developer, Samba Team Member