>> 1) convert the user's SID from its binary form into is SDDL form See sid_to_string(). >> 2) convert the SDDL form of the SID into its LDAP ADsPath? Not sure about this... -- Luke