1. yes, if documented in LDAP and parameters made available in Cognos Configuration
2. no, you can only modify AD properties though an AD UI.
2. no, you can only modify AD properties though an AD UI.