Hi team,In our environment, AD only hold all users accounts for authentication purpose. we dont have extra attributes such as "contractor" group, everyone in AD are same configure. we couldnt identify users.All users attributes are on Sun ldap server...