LDAP Authentication single OU works - now how to search whole domain?

I’ve got ldap working with active directory when i use a single Orgnaizational Unit. How does one get it to search the whole domain? I have users in various OU’s.

My ldap settings;

LDAP Server url: ldap://
Organization Unit: cn=users,dc=lab,dc=local
Base Distinguished Name (DN): cn=admin.erp,ou=service,dc=lab,dc=local

Password for Base DN:
LDAP search String: cn=*{0}
LDAP First Name Field: displayName
LDAP Email Field: userPrincipalName
LDAP Username Field: name

This continues from here ERPNext Active Directory

Hi Rahim, any update on this question?
I am also facing the same problem. Any solution available?