Thanks for the headsup.

The thing is that it's not KiXtart, or KiXtart COM that is failing here. What's wrong is that 'canonicalName' is a display-name, not the actual property-name (which is 'cn').

If you change your sample to use 'cn', you will see it works fine.

Apparently vbs does some name-translation before querying AD.

More later, thanks again!

Ruud