Tony - I think the LsaQueryInformationPolicy call that specifies PolicyDnsDomainInformation needs to define the pddiDomainInfo pointer using PPOLICY_DNS_DOMAIN_INFO, not PPOLICY_PRIMARY_DOMAIN_INFO. Thanks, John Goehringer