Thanks Todd. This would mean deploying a new AD server, something which we have no experience of, and it would cost us. O don't suppose there's any chance we could use Apple's Open Directory? Are there any third party plugin's around for this?