Ken -
Fuse's point is relevant, but only regarding users who are members of both domain groups 'MIMSUSER' and 'Healthcase Users'. For non-overlapping members I would expect this to work.Additionally, while the case statement would not evaluate the 2nd grouping for dual members, this condition by itself would not cause the original error you noted - 'Unable to logon to \\xxxBDC...'.
My guess is the situation is either KiXRpc service, or another LAN/Windows NT issue, and not your script syntax causing the error.
Suggest reinstalling KixRPC service on the BDC(s) noted in the error, as you may have corrupted DLL files (we are assuming you are using v3.63). Also, delete and reinstall Kix DLL's for Win9x clients in your netlogon share (confirm properly copied from PDC to BDC).
Are all clients receiving this error (WinNT/2K/9x), or only Win9x? Does it happen only to users on particular hub/switch?
Suggest also examining NT Event Logs on BDC and PDC for any unusual events - perhaps another service or software interfering with KixRPC.
You might also try changing script from CASE statements to IF, so that running script in debug mode (/d) for dual group members will properly confirm if all mapping attempts to the '\\xxxBDC' are failing, or only particular mappings (I suspect all would be failing).
Also, if you are noticing any other flakey connectivity issues to the BDC(s) in question check hub/switch device for failing port, loose/worn cables (to servers, and between hub/switch devices) etc.
Lastly, check this post for script on checking/updating Kix files to keep clients/servers current.
http://kixtart.org/board/Forum1/HTML/002030.html
Bill
[This message has been edited by bleonard (edited 20 March 2001).]