[Vipergrün]

The company I work for has an AD bridge product for Mac (and all "ix" flavors). We purchased Likewise, the product is now called PowerBroker Identity Services. We can manage a lot of settings via GP, including syslog, DNS, files, directories, permissions, etc. The users can authenticate with their AD identity and password or their mac/unix username. We can map the UID too so ownership of files does not need to change. Let me know and I'll hook you up. I do pre/post sales, training, PS, etc. and know the product pretty well. Install takes about two minutes on the client and a management console and a couple of things on the AD side. We will use the existing RFC2307 schema attributes for unix. You can restrict login access via windows groups. You can restrict group policy to client platform type, OU, etc.

Cheers
-Brad