Currently if your AD scan fails because of a group or person mapping change it can be hard/lengthy to identify the deleted/missing mapping. Similar functionality already exists in the system (when you try to add a mapping the system brings back a list of groups, ou's and containers) it would just require tweaking so the group/ou/containermappings list can compare itself against a list of available groups/ous and containers (visible when running a search) and use a visual indicator to identify the mappings that cannot be matched.