When I originally started this post, the user in question had not logged onto the domain so LS did not have any info in its db regarding the user. We since logged that account onto a machine and forced a scan of that pc. The CN is now correctly generated. However, as stated in previous post, that account is a 'resource' account, not a true user. We have since tested the script on our actual users and run into the 'comma' issue. See attachment for actual script LS is going to run. In order to work correctly, I think the script needs to read: "CN=test\, deditsd,OU={rest of CN}"