>OpenLDAP objects to us setting it's entryUUID values. My questions is: >does the invocationID need to match the objectGUID on that entry? By default it does, but in AD it changes if the DIB is restored. Hence in your case it probably doesn't matter if it is different. -- Luke -- www.padl.com | www.lukehoward.com