hi, if you take the default FreeRADIUS 2.x config and just follow that active directory guide, then it just works - you dont need to use exec ntlm_auth or anything...just configure the mschap module (which has an ntlm_auth line to be configured) alan