shouldnt using a wildcard '*' return at least the groups in the root of the domain?  I too am having this issue.  I am unable to pull any groups at all.  I am concerned that my AD naming convention could be at play; as I used a hyphen in my server na...