We have an eDir that spans over different security zones to maintain personal information. The different zones are different configured - ie one has a co-existence with AD, another does not.

In the zone where we have AD co-existence, we do not want the DLU to be used. In another zone we want the DLU to be used when users log in to Windows terminal servers (These servers are standalone servers outside AD).

For both zones, it is the same, replicated eDir. The users are using the same CN when the are logging in to the network independent of which zone they are located.

Will it be possible to differ the usage of DLU policies dependent of which zone the users are logging into?