AD Groups web query displays Active Directory groups, located in the domain or OU selected as a scope for the query. Default AD Groups web query is included in the built-in Active Directory Admin Unit, and a custom copy of AD Groups web query is copied to every new custom Admin Unit.
Web queries in a custom Admin Unit are used as a scope for role delegation and attribute policy. When limiting the scope of web queries to a specific OU, you limit the scope of objects available for management to delegated administrators. For more information, please see Administrative Units article.
AD Groups web query settings
AD Groups web query uses common query settings, available for every web query in Active Directory Admin Unit. For the information about common settings, please refer to the following article: