Currently there is no description of "fixed attributes" and "empty attributes" in the advanced settings tab of a policy. It is not intuitive to understand. There could be a tooltip describing what this does. → http://docs.univention.de/handbuch-3.1-1.html#central:policies:assign