Disable cachingcache.expiration="0"You may also want to only authenticate users that are a member of a security group, rather than re-arrange your whole AD structure.userIdAttribute="sAMAccountName"userFilter="(&(ObjectCategory=person)(memberOf=CN=OurProject,OU=DL\ and\ Support\ accounts,OU=GBLCM,OU...