As domain administrator I would like to maintain a whitelist for the AD-Connector to make my work easier or to test things. The following pain points exist at the moment: - At the customer the administration of the AD-Connector became extremely confusing. - On the Windows side there are objects that should not be synchronized. - In several projects I noticed that this would be a very helpful feature to start with the AD-Connector.
I suggest to use the term "sync only filter" as it describes better what we need here. I adjusted the Summary.
*** This bug has been marked as a duplicate of bug 57442 ***