Is the URL below what I think it is? http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnkerb/protocol/windows_2000_authorization_data_in_kerberos_tickets.asp M$ released, minus the stupid click-EULA, documentation for their proprietary Kerberos PAC? I must have been stoned, and miss this - and I didn't get invited to the party. Huh.