configure active directory integration of primary zones