>It's whatever was used as /princ in the ktpass.exe mapping to the user >account. >Most people map > ktpass -princ host/hostname at NT-DNS-REALM-NAME -mapuser account >where >hostname is the host's DNS name ktpass sets that as userPrincipalName -- makes sense for salting, see previous post -- Luke --