We have been using the original Active Directory component for a number of years to sync our HR data with AD.  It's been generally good, but performance hasn't been excellent given our number of employees and the size of our AD.  I was very excited to see this refactored version, but I'm having some problems:

1. "Update" actions result in "Access is denied" errors.  I'm using the same account we currently use for the older application, in the same environment, with the same resources.  In particular, looking at the "UpdateUser" action, I compared the input structures from the older version and this one thinking there may be some attributes that aren't correct or perhaps the user account doesn't have privileges to update.  Aside from a couple of differences, I can't see why it would result in a privileges error.  I'm wondering if there is something fundamental about the change to the Directory Services namespace instead of the Account Management that might be causing this?

2. The "User_Get" is not returning the directReports list; I think this might be commented out in the extension.  It will return the first record if added as an Extended Attribute to a user.

3. The countryCode is now returning the Numeric Id (e.g. 840) as text.  The original version returns the "c" attribute, or 2-digit abbreviation (e.g. "US").  Just calling it out in case people were to swap out the actions and think they were the same value

4. The VoiceTelephoneNumber output is not returning the user's telephone number.  However, when I add the "telephoneNumber" Extended Attribute (as referenced in AD), it will be returned.  

Let me know how I can be of assistance in troubleshooting.