Domino 8.5.1 introduces two options for SPNEGO based integration with Active Directory. For this to work, certain information needs to be copied between AD or Domino, depending on your choice of architecture. For both these choices there's a TDI solution that gets the work done.
This solution can be run as often as you'd like. It will not create duplicates or add values where attributes already contain the correct information
TDI can also perform change detection on the source. We will update this solution with that capability in the near future. This is pretty simple for a person slightly familiar with TDI, so it's an excellent exercise for the reader.