First I'd like to say that so far its looking like the AD plugin that shipped in vRO 7 will actually work with our directory. The last time I tested it was still too slow and unstable. I'm not sure if it is something on our end or all the result of changes the vRO team made but its looking promising.
I am curious if I am testing something incorrectly though. It seems like using ActiveDirectory.search* functions are returning object types other than "User" when I specify that type. I am definitely seeing computer objects. If I specify "ComputerAD" as the search type the filtering seems to work as I only see the computers.
Also, is there a way to specify the field to search on? We have created workflows that are wrapping the dsquery command and query against specific fields. Is there a way to format the query string to target a field?