Thanks for very good software.
A few issues with big installations of Active Directory:
User filter don’t work when in Group interface (when resolving members?). Have a lot of users must be filtered - for example disabled one. However In users list all seems good.
Should be some workaround of “duplicated users and groups” problem. If we not in single domain but forest - we definitely will have duplicated
users and groups like “Guest”, “Domain Users” and so on. My opinion - it should be an option to use full distinguished name of user and group
object instead of simple “sAMAccountName” or “cn”. Or (in case of users) “userPrincipalName” for example.