>I'd advise against this feature period. Fair enough. FWIW, in AD a service principal is any object that has the servicePrincipalName attribute -- the object class is AFAIK not consulted. -- Luke --