@jdoma,Using the pre-processor to achieve this functionality, in my professional opinion, is not the right approach for this problem statement. Even if this works, there is a significant overhead as you will have to check each and every user on every...
@shilpab,For the specified API permissions for each modules in the documentations, you can try replacing the *.ReadWrite.All permission with *.Read.All and give it a try.
@Ankyt19 ,If you have configured the new accounts to change password on first login, then first time logging in from the LDAP Browser does not work.Try logging through a remote session or some other means to validate.