>is it possible to get the TGT of an arbitrary principal >without changing it's password? Do you mean without _knowing_ its password? Look at Microsoft's S4U2Self extensions in Windows 2003. -- Luke ~ ~