What RPC implements NetLocalGroupGetMembers? The samr 0x21 (samr_GetMembersInAlias) RPC looks like the right functionality but the difference in API leaves me wondering a little. Mike -- Michael B Allen PHP Active Directory Kerberos SSO http://www.ioplex.com/