> Looks like I somehow did both, which surely is contra-productive. I > better remove the unix attributes for Administrator... > If I do this (rely on the user map file containing "!root = BPN\Administrator BPN\administrator"), should I expect "id Administrator" to give anything? Ole