Still can't get setfacl to get group or user info from the AD (Windows 2003) <snip> Somewhere is the magic to get setfacl to see the AD groups and users. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Found the problem and the solution. On the Windows AD the Unix attributes for the groups were not enabled and once enabled setfacl worked. Many thanks, James