Okay, that clarifies the situation. I don't have docs with me right now, but I'll look into using iAS in a workgroup as opposed to being in a domain.