Note: This should be attempted only by an experienced Active Directory administrator.
Returning user group information from Microsoft's Active Directory for Windows 2000 Server requires updating the LDAP/LDAPS schema. See your Microsoft documentation for details.