It's not a trivial excercise - I found the how-to's some time ago and did my best with them.....I got as far as joining my e-smith box to the domain successfully, but got stuck on the custom templates for winbind to authenticate users from the domain. It's probably easier if your Win2k is in mixed mode, but we'd already taken the plunge and thrown the one-way switch to native -mode. If you have success let us know - especially with pointers , how-to's etc. Maybe we'll find it easier once someone who's an expert posts a how-to for Samba3 - it has much tighter support for Active Directory frokm what I've read.