Our LDAP Sync in Forms is currently setup to sync just our Users OU. Our Groups OU is 1 level up along with a lot of our other OUs. I am wanting to take advantage of assigning access rights to different forms by assign groups to them, but need to change the Base Distinguished Name in order to have those included in the sync. Before I make that change, I would like to know what objects are synched when performing the LDAP Sync? Is it just User and Group objects?