I was able to find the solution in a thread from 2007.
In case others with Microsoft LDAP are struggling the key for me was:
On the LDAP authenticaion (NOT LDAP ENROLMENT) plugin, down in the Data Mapping area, map ID Number to distinguishedname and have it update.
On the enrolment plugin the section that says If the group membership contains distinguishednames specify... etc... set it to User Type MS Active Directory, and ID Number Attribute distinguishedname.
One minor note, while stated in the docs its easy to skip over, you have to make two groups (very counter intuitive btw) one for teachers, one for students, and they have to be named the same (which AD wont let you do), so you have to change the pre-2000 name to be slightly different, I added a T to the teacher version.
Hope that helps someone in the future!
In case others with Microsoft LDAP are struggling the key for me was:
On the LDAP authenticaion (NOT LDAP ENROLMENT) plugin, down in the Data Mapping area, map ID Number to distinguishedname and have it update.
On the enrolment plugin the section that says If the group membership contains distinguishednames specify... etc... set it to User Type MS Active Directory, and ID Number Attribute distinguishedname.
One minor note, while stated in the docs its easy to skip over, you have to make two groups (very counter intuitive btw) one for teachers, one for students, and they have to be named the same (which AD wont let you do), so you have to change the pre-2000 name to be slightly different, I added a T to the teacher version.
Hope that helps someone in the future!