I've had many Duo customers ask whether it is possible to just use the root domain of an Active Directory forest to synchronise all users including those that are in…