use samAccountName instead of gid