Out of curiosity is the DSS authenticating to ADS server or are you using our built in LDAP?