Here's an interesting story. It's one of those cases where I'm not sure I went down the proper path but it got me to where I wanted to go... I have a client that was running a MOSS-based extranet (web server in the DMZ, database server in the domain).