> In other words: when you're doing the RIGHT thing, there's an > error. When you're doing something STUPID (using AD for your KDC), > there's no error. Yet another case of MS purposefully being > incompatible with the primary implementation of a protocol? Never attribute to malice that which can be adequately explained by stupidity... ~ Andy