I think it would be very helpful if the AD sync utility could sync AD security groups that have computer objects. We have security groups for our computers and syncing those would save a lot of busy work and automate the process.