We recently upgraded to 2014 R2 SP1 and would like to integrate everyone's sign in to Active Directory. The only way we've gotten it to work so far is by associating users to their AD Distinguished Name. The problem with that is that we are also in the middle of cleaning up AD and some users are going to moved around into different containers. The move will break the link to AD. Is there any way to use the Fully Qualified Domain Name instead?