I'm working with a customer who is using qmm to migrate ad and exchange from sourcedomain to targetdomain.  User and group objects were all migrated from sourcedomain to targetdomain some time ago, and have kept in sync with the DSA with a one-way sourcedomain…