Has anyone else experienced "ghost" NT ids (NT00000XYZ Ids vs domain\userid) being created in User Group Definitions after running the Federation Sync with Landmark? We have LSF set as our "source of security".