OK, I know the SRND points to using OU to limit users that are synched with AD - but can we create a User group in AD called CMUsers or something similar and synch users by adding them to that group?

I am thinking it would look like "cn=CMUsers, dc=company, dc=com"

We want to limit users that synch but not necessarily by OU, for example the sales OU has many users that do not need to be in CM, and I have CUCMBE so I want to keep the user count low.

Has anyone done this?