I have been reading up on SUA and can’t see any mention of LDAP changes being made when SUA is enabled. As far as I can see all the posix bits are already there and SSSD should work fine without SUA. I’d really like to know why I need SUA as it involves a whole lot of other changes in AD that I don’t particularly want. We have Windows Server 2008 R2.

 

TIA

 

Greg