My team and I are troubleshooting an issue where a service account is unable to read all user objects in a given OU despite having the correct permissions in the ACL.