I too have had no luck with DSS and win2008 in 2003 ADS mode and no suggestions on how to make it work. Poor kerberos functions in DSS I think. WHo would use NT4 or straight LDAP in modern win servers these days is beyond me. Bad security, imo G Luck.