I have enabled scheduled import from AD but it keeps bringing in duplicates. I have seen the other post about this  https://forums.manageengine.com/topic/duplicate-requesters-when-importing-from-active-directory and have similar issue with the domain showing for some so made sure that "Override user information based on e-mail ID" is enabled. 

What is the best way to link to AD so that new users are automatically created without it creating duplicates? 

I have both "Enable Active Directory Authentication" and "Enable Pass-Through Authentication" turned on but LDAP turned off.

Many thanks!

Kind Regards

Dan