Chris Smith wrote: > You seem to be missing the the DOMAIN declaration in front of the username - > it's not just for group names. > > valid users = +DOMAIN\username > > or in your case > > valid users = +DOMAIN+batkins Even with 'windbind use default domain = yes'?