You're totally right. Been testing against a local AD instance.