Duh! I hadn't selected the 'logon to NT Domain' box on the Windows client. I was tired - that's my excuse, and I'm sticking to it! Got confused between workgroups and domains again.... As a matter of interest, how do you tend to configure the login scripts? For example, do you create one for each user, or a system-wide one, or both?