ok ..I'm still having problems with mapping and INGROUP. mapping isnt done at all or is running fine for the first INGROUP group. If the "mech" group is in the first group the mapping is done just for them ..If I move "test" group in the first line of script just "tes"t group is mapped. If a user belongs to the both groups ,sometimes not mapping at all and sometimes just for one of the groups..any clues? ..