When using samba/ldap with a PDC/Master BDC/Slave configuration, Can i make the BDC read only that password changes etc. will only be done on the PDC as the BDC has only read access to the slave LDAP server? Thanks, David.