On Tue, 2013-08-27 at 20:11 +0200, Marc Muehlfeld wrote: > Do posixAccount/posixGroup > objectClasses have to be there normally? No. With the AD schema, you can use all of rfc2307 without the need for the objectclassed which define them. Just add the attributes. HTH Steve