Thanks, The issue dos not seem to be with the separator. It is with the @ as a leading char in the group name. But I will give it a try on Monday Michel van Deventer michel at van.deventer.cx Fri Jun 6 21:34:23 UTC 2008 Having a quick glance at the config I remember I had a sort of same issue, set your winbind seperator character to something like '#' and do the same in the valid users and groups and it should give you more working stuff ;) The \ character is a line break which tells samba to continue reading the config on the next line including spaces and linebreaks...