I am trying to follow http://us3.samba.org/samba/docs/man/Samba-Guide/appendix.html#altldapcfg It says: "It is also necessary to preload the well-known Windows NT Domain Groups, as they must have the correct SID so that they can be recognized as special NT Groups by the MS Windows clients." How do I do this? Most grateful for any hints... TIA Simon