Thank you for your answer. Where should the user log in? Into a share? Into an AD-connected Computer? Anian -----Original Message----- From: Volker Lendecke [mailto:Volker.Lendecke at SerNet.DE] Does it still fail if j.doe logs in? If that one fixes it, then you see effects of the netsamlogon_cache.tdb.