How does it determine which active directory security groups to pay attention too? I'm missing Administrators among others.