never mind, my test were not good: i've logged into a client pc's just afeter stopping down samba services on the pdc. afeter a reboot of the client, logging without pdc just work ...