Hi Rowland, > You are hitting one of the problems with using a DC as a fileserver, you > only get uidNumber & gidNumber attributes from AD. You means that there is no way to use loginshell and homedir from AD in the DC? While in other domain members it will work? Thanks Simone