I to interconnect the CCM and AD (2003), using the guides from Cisco for this. Follow step-by-step with the administrator of the AD. The communication of the CCM and the AD is OK (users are seen in CCM), but can not make any changes in the user side of the CCM (change of PIN, device association and etc).
DCD Admin User profile is the Schema Admin group, as described in the guide, change the parameters of the record were made but these updates do not occur.
Changes only occur when we change the access right of DCD Admin from Schema Admin Groups to full access. However, this is not in the documentation and the procedure for full access to the third party software is against the policy of the client.
Some of you have made the integration of CCM 4.3 with AD? There is some detail that is not described in the guide?