Alpo,

I also had a similar problem after an upgrade from NT4 to W2K network environment. The @primarygroup for some reason would not resolve properly. The solution that worked for me was to make ALL users created in the NT4 domain part of the "Pre Windows 2000 users" group. It may sound funny but give it a test run on a few users.

J