Hi there. Quick one: When syncing idmap.ldb say from DC1 -> DC2, do you need to stop samba-ad-dc service before replacing idmap.ldb in DC2 ? Or else, can this be done with the service running ? Does it need a service restart after the file is in place ? Thanks, LP