Hi Alan, I asked right question but the person replying didn't understand how freeradius does mschap auth... Instead of arguing with anyone it's better if we start to work together so between samba and freeradius a solution could be achieved as the AD admin will not care about our headaches and simply tell to use nps instead!. Many Thanks Arnab