Active Directory Integration (user admin & SSO)

We are now implementing SAP EP(NW04s) and ECC HR(ERP2005) with thousands of employees and thinking of utilizing Active Directory which will be newly implemented with the SAP system. Some users will use both EP and SAPGUI to access the new system.

Q1. When exporting HR master to AD, which master table is used?

Q2. Will organizational assignment data be transferred as group of AD (not only “SAP_HR” level but which department the users assigned)? And can be used for authorize in AD and as EP role?

Q3. Can you bulk activate users created in AD deactivated?

Q4. Is it possible that SSO through AD, EP and ECC via SAPGUI? If possible, any development is required

any help is appreciated. Thanks.