not sure it's a dns problem as NT clients do trust highly on WINS.
anyway, having abou one third of group-cache missing and having not better information in logs...
I think this is time for ruud to answer where does kix fail.
and does it quit caching if one sid-translate fails?
_________________________
!

download KiXnet