Thanks for clarifying that. I've read rfc 2317 as you have recommended and by the looks of things I have to now ask my dns vendor how this is implemented in their products scheme of things. Does anyone have a DNS appliance or software that does this well and interoperates with multiple AD forests well. Thanks Mike