Thanks for pointing us to the right module.. after reading through that it is seeming a bit extreme. we don't really want to add the zentyal server as an additional domain controller. we would just like to sync the ad accounts with the Zentyal so we can use the captive portal, filtering and bandwidth limiting.