Create AD subdirectores and permissions in web interface

This has been discussed and summarized here:

Too complex!