Just looking to streamline my strategy with deploying NOWS, and trying to minimise passwords.
Have used Zenworks DLU in the past, but am interested in others options.

IDM will synch the two separate and independent directories. From seeing it in action, it can be a set and forget prospect with the synch service just running in the back ground.
DSFW is basically an interface to eDir that presents as AD.

I want eDir to be the authoritative directory, and have password and user accounts synch between Edir and AD, and have the possibility of using some Group Policy's. Which is better and easier to deploy and administer, DSFW or IDM?