Duplicates in synchronization with Active Directory Question 2