Kent the reason I suggested using GrpMaint was that if this is W2K AD and he has replication intervals set too high then he may actually be creating the group on one DC and the client may be query a different DC. GrpMaint can easily check the group on each server. I would not want to troubleshoot this problem by connecting to the domain because we do not know for sure which server is being enumerated.

[ 04. December 2002, 14:48: Message edited by: Howard Bullock ]
_________________________
Home page: http://www.kixhelp.com/hb/