SquidGuard

[rdgbwt]

Hi Guys

I am trying to setup SquidGuard to assign access to the internet based on Active Directory group membership however I am not get it to work.
My PFSense box is part of the domain, with Squid itself authenticating with Windows NTLM perfectly, however when testing the config out I get an error in the squidguard logs " ldap_simple_bind_s failed: Invalid credentials".
The Group ACL has the following:
ldapusersearch ldap://192.168.50.254/DC=bwx,DC=local?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=InternetAccess,OU=PFSenseProxy,OU=Security,OU=Groups,DC=bwx,DC=local))
Is this correct? What other settings should I be configuring?

Your help would be greatly appreciated.