You wouldn't notice it in a small test environment like I have but the timeout mechanism for LDAP doesn't always work and old connections remain connected until the server is rebooted. The scheduler thread that determines when to time out LDAP connections doesn't correctly handle the rollover of the 32-bit time value that the GetTickCount function returns. Check MS kbarticle Q258066 for updates. The problem was fixed in W2K SP1.