If your doing active directory just choose Windows Active Directory (NTLM), no need to setup ldap queries for just AD. Note that in 2.3 there is a but with efw joining AD, but follow the posts in
http://efwsupport.com/index.php?topic=1015.0 for workarounds for that issue.