We recently setup AD integration on one of our MX's to leverage that for user enrollment of their BYOD devices (Apple or Android). We have it working (for the most part) but have noted that it automatically pulls all of the user's Active Directory Group tags into the device's profile.
These are unnecessary for our deployment.
Does anybody have a clue on how we can prevent those tags from being pulled in? Truthfully, we don't need any of the AD groups to sync.
