Filter users based on nested LDAP groups, only available in EE?

I’m trying to configure Gitlab CE on our network with nested AD groups. I can allow access to all users, but we want to filter users using user_filter: with nested AD groups.

I get the filter to work, but I only see users in the specified group, not in any nested group.

Will we have to upgrade to EE to get nested groups to work?