Dear Howard,

though it took a long time to get all infos together I now have the right question (I think):

If I have a new domain A where all computers get their machine-account, SID and everything else and the users which log onto these computers are part of domain B - which Domain-Controller does KIX log onto, to get group-memberships?

I know that on all old machines, which have machine accounts in domain B, there are no problems whatsoever, but it seems that even though I told KIX to get the memberships from Domain B, it in fact does not do this on the machines which have machine-accounts in Domain A.

Your answer only refers to the users and where they are logging onto.
I have to stress it once again, that all users are logging on to the old domain.

Thanks again for your help...
_________________________
Serenity: You can't stop the Signal!