Hi, with NIS the "compat" Mode in /etc/nsswitch.conf was available. So you could exclude user/group from login to the host. I read this mechanism is not possible with winbind. Is there any solution to solve this issue ? Bye, Andy