It really depends on how your LDAP Structure is, are you using Active Directory that has some extra features with nested groups.
But in general you should set you base to be the absolute path to where your end users are or at least as close as you can. Then depending on how the end structure is you can define if it should search the hole tree or only a subset of the tree.