> Thanks for any suggestions > sourceAttributeID="objectSid" objectSid is binary. Are you making sure that the LDAP is told this in your DataConnector? IFAIR the precise syntax may have changed between the two release. /Rod