It seems that I would need that in place in some future (rather earlier than
later)

What would be the "easiest" way?

Setup AD on real Win Server & use DirXML startarkit for sync
Setup OES2 Linux with AD role?

Seb