LDAP and Windows

[goga]

Good afternoon, I configure LDAP and there were difficulties.
Bind credentials pointed
Search scope tried to switch costs one Level
Base DN = DC = test, DC = local
Authentication containers OU = VPN_USERS, DC = test, DC = local
When the user is in this container, everything is fine, but I need to configure for the group.
In my container there will be a group USERS_VPN in this group I will include people for VPN
I do like this & (memberOf = CN = USERS_VPN, OU = VPN_USERS, DC = test, DC = local)
and it does not work !!!
Tell me what I'm doing wrong, maybe I didn't check any?