>Do you mean that unicodePwd and dBCSPwd can be read out from an AD LDAP >server ? >I thought these were write only attributes. They can be read using DRS RPC only. -- Luke --