I will try to repro this later this evening.

Until then try this and let me know the results:

Examine the KiXtart TokenCache. Do the group names appear correctly? The cache can be found at: HKEY_CURRENT_USER\Software\KiXtart\TokenCache.

Try the test code below substituting your SIDs and verify that the proper group name are returned.

code:
? "Group name = " + sidtoname("S-1-5-21-24129212-1035812195-1543859470-53966")

Does this generate and eventlog error?

[ 05. May 2003, 21:28: Message edited by: Howard Bullock ]
_________________________
Home page: http://www.kixhelp.com/hb/