On 06/22/2016 01:44 PM, mj wrote: > > And then perhaps we also need to set the idmap ranges on the DCs? I > thought they were only for the domain member servers... https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD :-)