4.0 Assigning NSS Trustee Rights for AD Users and Groups