I have used ADSI linked server objects before to query AD but I have a problem using a dedicated domain account which when I execute my query fails advising the that there was an indication from the provider taht the account doesn’t have enough permissions. If I change the ADSI security settings to use the logged in context it runs perfectly. The strange thing is I am logged on as the same user that it fails for when I specify the account that I am also logged in as when I get it to use the logged on context user. The AD account has full domain admin permissions (this is a test rig btw)