Make sure you understand your schema and can test the results (returned records) you want using LDIFDE.EXE from Windows. That was the key to my success. I was able to get OTRS to connect to our AD LDAP and only get the 2,000 or so records from our OU out of a domain of over 10,000 records. Make sure you have the e-mail field in AD filled in. That set me back a while. Since we use Notes the e-mail field was empty and we had to fill them in with the correct address to get it work right. The instructions in the 1.3 manual are right one.... Good Luck!