I have looked at the documentation I could find. I have a question for someone who has used an AD domain controller for account access to a FMS hosted solution. This FMS is on the same domain as the DC. You need the name of a group for accounts; and a privilege set; but is there further authentication needed to set this up i.e. a domain admin to allow this to happen? I have bound an OD server to AD and that requires domain admin log/pass. I'm trying to picture the entire scenario from beginning to end. Thanks for your time - it's much appreciated.