LDAP incorrectly insists on a default filter when "This is an active directory server" is true

It should be permissible in Snipe-IT to have a 'blank' LDAP filter when Active Directory is enabled - we automatically put in that big gnarly filter that shows only 'normal users'.

And it may even be permissible in regular LDAP as well - you can certainly do LDAP searches where you specify no filter, so I think Snipe-IT might also want to allow it as well.