I have managed to make Windows sync work and have one user synced from AD in my directory. The posixUser-attributes are still empty. How do you populate those attributes in an effective way? If I have an empty directory, and the users alredy exists in AD I have been thinking of this manual approach: 1. Perform a full re-sync from AD. 2. Export all the users in directory server in a LDIF-file and with scripts populate the needed attributes like uid, shell, home, etc. 3. Write the changes back in directory server. For new users, if not too many, perform the needed changes manually. What do you think? Is it possible to do this automatically with Windows Sync or do I have to use approaches like I described? Thanks, Erling