[Samba] Enabling LDAPS in Samba in a dual-DC setup

[Stephen]

> Good point. I've looked also i for some hint, but lead to nothing.
>
> For now, i've created a specific OU for that users, create a group and
> remove 'Domain Users' group for that users; also, i've no rfc2307 data
> for that user.

Marco, I found the following post that describes how to delegate access 
to LDAP via ADUC for a new user. Not tried it yet - but it sounds promising.

https://social.technet.microsoft.com/Forums/windowsserver/en-US/9c231b65-7b66-4331-baa1-7aa7a9a26050/accessing-ldap-on-active-directory