I've tried to set the CTX flags as read only for the UCS in AD member mode. But after that I'm unable to change any attribute of the synced user: The LDAP object could not be saved: Value may not change. key=CtxRASDialin old=None new=E
See also Bug #31884 (and Bug #29884)
This is possible since Bug #29884 is fixed. We can revert svn r52417 / git a475a8526716cfca7fb587aeb97b4deb8b5c22ef (Bug #34092). Patch in branch fbest/35530-ctx-flags-readonly-in-ad.
Worksforme. The flags have been removed in Bug #46118. *** This bug has been marked as a duplicate of bug 46118 ***