I forgot to mention: according to the generally-excellent O'Reilly book on Active Directory, Microsoft are working on a "connector" that will keep Active Directory synchronized was other LDAP directories. regards, -- Luke -- Luke Howard PADL Software Pty Ltd http://www.padl.com