<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" style="display:none;"></style> </head> <body dir="ltr"> <div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;"> <p style="margin-top: 0px; margin-bottom: 0px;"><br> </p> <div style="color: rgb(33, 33, 33);"> <div> <blockquote type="cite"> <div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif"> <p style="margin-top: 0px; margin-bottom: 0px;"><br> </p> <p style="margin-top: 0px; margin-bottom: 0px;">***maybe***</p> <p style="margin-top: 0px; margin-bottom: 0px;"><br> </p> <p style="margin-top: 0px; margin-bottom: 0px;">c) You might be able to do both winsync and trusts at the same time then that is simpler provisioning. ie a user gets created in AD and automatically gets created in IPA ready for you to put in the user group you want.<br> </p> </div> </blockquote> <br> I am not sure this is the best solution really.<br> Trust and sync do not help each other. The fact that you have trust does not help you to provision users the way you describe.<br> <br> <blockquote type="cite"> <div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif"> <p style="margin-top: 0px; margin-bottom: 0px;"></p> <p style="margin-top: 0px; margin-bottom: 0px;"></p> </div> </blockquote> 8><------<br> <br> They achieve different things. How otherwise do I get 2000+ AD users into IPA? To me winsync allows automated provisioning of users into IPA via AD, this greatly reduces manual effort. <br> <br> <br> <br> </div> </div> </div> </body> </html>