I got all the RPC stuff working for users that have read access to AD. (Read on AD = go to the root of the domain in AD users & computers and check to see if everyone or said group has "Read" security access "on this object and children objects".) We removed the default setting of Pre-Windows 2000 Compatible Access group's read privileges. We don't want just anyone to be able to read a user's attributes. So certain users can read any object in the AD domain and others can't. Those that can read -- KiXtart works great. Those that can't read -- KiXtart bombs out if I try to access

@FULLNAME
@RSERVER
...and I'm not sure what else.

So this is my dilemma. I don't want to give Read access to everyone in the domain just so KiXtart runs properly.

I'm fairly sure this is a problem with the KxRPC interaction (probably the Kx95.dll from my read of article above) because I've tested with a Win95, Win98 and WinXP -- only the Win95 & Win98 machines have this problem. WinXP does just fine.