Hi, > It's the better way. if you go this route, whats the way to do eg if ( "%{ldap:ldaps:///dc=foo,dc=bar?department?sub?(&(sAMAccountName=%{User-Name})(memberOf=CN=leet staff,OU=p45,OU=possible,DC=foo,DC=bar))}" ) { stuff here } ?? alan