Fixing GID problem with AD accounts from a pull request #581 on the our-boxen repo, modified site.pp to better suit my needs