Please improve support for Active Directory groups. It is the primary method of identifying groups of users in Active Directory.

Great product if you have a small amount of users. In large enterprise networks, it lacks the ability to apply policies to dynamic groups reliably.

We would like to attach Collections to Active Directory groups, and not just Active Directory OUs. OUs do not accurately reflect the groupings for our Internet access filtering needs, but our Active Directory groups and roles do. It is on that basis that we apply our security settings based on user "Role".

This way, we need only place Active Directory Users into Active Directory Groups to assign them a filtering policy. Reliable support of Active Directory Groups is one feature missing from what is otherwise a useful security product for us.