<html><head></head><body><div style="color:#000; background-color:#fff; font-family:verdana, helvetica, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1479718868225_4252">Hi all,</div><div id="yui_3_16_0_ym19_1_1479718868225_4253" dir="ltr">I have established an AD trust Between Free IPA and our Windows network and its working. No problems there.</div><div id="yui_3_16_0_ym19_1_1479718868225_4254"><br></div><div id="yui_3_16_0_ym19_1_1479718868225_3567" dir="ltr">I have created the IDM Groups for active directory as proposed in section 5.5 of the Windows_Integration_Guide.</div><div dir="ltr" id="yui_3_16_0_ym19_1_1479718868225_4273"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1479718868225_4301">Now what? The group in Free IPA I've created (from section 5.5) allows me to do what? Am I supposed to get a synchronised list of Domain Admin users in Free IPA?<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1479718868225_4328"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1479718868225_4427">I can log in to a Linux client using AD credentials, regardless of the AD users external map (The user I'm logging is with is a member of the AD Domain Admins group).</div><div dir="ltr" id="yui_3_16_0_ym19_1_1479718868225_4426"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1479718868225_4425">Many thanks,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1479718868225_4445">James Harrison<br></div></div></body></html>