Gents, does anyone have any experience with using LDAP sync against an Active Directory forest, where AD groups contain not only local users but aslo referrals to users in other AD domains?