Found this one in the meantime http://xania.org/article.php/samba_cached_credentials pointed the customer at it as he told me about users in Domain "DOMAIN" and others in Domain "PDC" ... We'll see. stefan