Sounds like your not calling the ntdomain module and don't have the mschap 'domain hack' enabled alan