by Richard Lian.
Thanks Ken - I have exported a list and set all users that I want to LDAP then re-imported. That seemed to work. I then did an LDAP sync from CLI manually a few times which has added new users and suspended old ones (just in case I need to reactivate).
All users that use Moodle have a username (SAMAccountName that is) that matches so I set that to be used.
I have tested login as a few users and can login and still see enrollments - so fingers crossed I have set it right!
Outstanding is to setup a Cron task for the sync and then explore SSO
Regards,
Richard