Is it customary to do an ldbrename on accounts CN field to "Firstname Lastname", after migrating to Samba4 AD from Samba3 ? I'm asking because I discoverd after our migration that new user accounts created with ADUC contain "Firstname Lastname" in the CN field. Contrast that with the imported accounts from Samba3, wchich have "flast" in the CN field, identical with what's in sAMAccountName. Since ADUC populates "Firstname Lastname" I'm guessing that's the correct form and I should go back and ldbrename our imported accounts. Yes? Closely related, user account queries against Samba4 should be directed to the sAMAccountName, and not CN ? Thanks, -Mike