Hello Anthony,
I'm facing this issue (my company AD contains a lot of groups and users)
Consequence, a click on Access button triggers a huge download from the AD to dbFront server memory (it goes above 1 GB).
I tested your proposal but dbFront still download a lot of data from AD even if AdminAllGroup, AdminMyGroup and UserGroup are set.
Regards,
Pierre