--- a/ucs-school-metapackage/debian/ucs-school-master.postinst	
+++ a/ucs-school-metapackage/debian/ucs-school-master.postinst	
@@ -112,13 +112,13 @@ if [ "$1" = configure -a -z "$2" ]; then
 	fi
 fi
 
-if [ "$1" = configure ] && dpkg --compare-versions "$2" lt-nl 9.0.2-8; then
+if [ "$1" = configure ] && dpkg --compare-versions "$2" lt-nl 11.0.1-1; then
 	# Add some local groups to the ignore list
 	# Note: This must be in sync with univention-s4-connector.postinst (Bug #40418):
 	# TODO: Exceptions of Bug 29486 Comment 3
 	group_ignorelist="$(ucr get connector/s4/mapping/group/ignorelist)"
 	updated_group_ignorelist="$group_ignorelist"
-	for g in "Replicators" "Printer-Admins" "System Operators" "Enterprise Domain Controllers" "Remote Interactive Logon" "SChannel Authentication" "Digest Authentication" "Terminal Server User" "NTLM Authentication" "Other Organization" "This Organization" "Anonymous Logon" "Network Service" "Creator Group" "Creator Owner" "Local Service" "Owner Rights" "Interactive" "Restricted" "Network" "Service" "Dialup" "System" "Batch" "Proxy" "IUSR" "Self"; do
+	for g in "Console Logon"; do
 		echo "$group_ignorelist" | egrep -q "(,${g},|^${g},|,${g}$)" \
 			|| updated_group_ignorelist="$updated_group_ignorelist,$g"
 	done