Using v3.0.1.

I'm collecting users and groups from AD using the AD Identity Collector.
I've noticed that the standard "Domain Users" group is empty in IG.
In AD it contains over 9000 members.

If I do a test collection and download the resulting ZIP file I can see
that there are no members in the test collection.

In catalina.<date>.log I can also see it comes back as empty.
"OBJ_ID": "CN=Domain Users,CN=Users,DC=xxxx,DC=xxxx",
"description": "All domain users",
"distinguishedName": "CN=Domain Users,CN=Users,DC=xxxx,DC=xxxx",
"cn": "Domain Users"

Is this by design or does IG not use range retrieval when reading AD
groups? See https://msdn.microsoft.com/en-us/lib...(v=vs.85).aspx