Perhaps I’m making this too difficult. Since you’re querying AD, how about a limit by AD container? Many of my larger customers organize AD by site (which might include one or several IP subnets), That would be great if you would present a Container Map of AD, and allow discovery by containers specified.