>you can use setspn to assign a SPN to a user or computer account. Right, but you can't use the SPN as the client name in an AS-REQ. You have to use the SAM account name or the UPN. -- Luke --