Wildfire 3.1.1 and Active Directory LDAP groups

Question for those running AD and LDAP groups.

What is the best way to share out / hangle AD LDAP groups for use as IM contacts lists?

I see there is an issue where if person “X” is a member of 2 different LDAP groups that have been shared out as contact groups. person “X” will randomly get one of the 2 groups assigned instead of seeing both groups.

How are others handling sharing out / managing AD LDAP groups in an enterprise?