>>>>> "Rouiller" == Rouiller Claude <claude.rouiller at rtc.ch> writes: Rouiller> I thought it had to, when the KDC is a MS Windows domain Rouiller> controller. I don't think this is quite true but I do think it is true that there will be significant complexity if realm doesn't match domain for an MS realm and some things may not work. --Sam