Use display name instead of internal LDAP SID