I setup active scanning to only occur within a single OU. However, the only affect that seems to have had is that it scanned that OU first, then proceeded to scan the entire domain over the weekend. The difference is about 17,000 workstations more ...