Can someone post the default rights, if any, that the [Pulbic] object should have to the top of a tree? In the past we used the [Public] object for LDAP Contextless logins but have recently changed to using a dedicated read-only ldap user account. I just want to make sure [Public] has the least rights it needs to the tree. Thanks, Chris.