Strange.....AllowUser works perfectly and AllowGroup does not. Would anyone know how to troubleshoot that? I can see in the error_log the user getting denyed, but nothing else of interest. I have a feeling that it's ldap related. cups and ltsp are on one machine, samba/ldap on another. Thanks, Peter