Hi John. Did you ever find a way to solve this ? I´m looking at the same after upgrading our Domain Controllers from 2003 -> 2012R2 Best Regards Kasper Nielsen