This may be totally unrelated, but does this factor in the ability to store RIDs seperate from UIDs (the "machine account" issue)? I thought I heard passdb would somehow address that. - Kevin Colby kevinc at grainsystems.com