Google Apps Directory Sync for Postini Services Administration Guide - Manual (Page 43)

46 Release 1.3.32, October 2009
LDAP User Sync
This shows a list of rules used when generating the LDAP user list.
By default, all users that match these search rules will be added to the message
security service user list (or moved if they are in a different organization) and all
users that do not match these search rules will be removed. You can change this
behavior with exclusion filters.
This page shows the list of search rules. In a new configuration, this will be an
empty list. To add a search rule, click the Add Search Rule button at the bottom
of the screen.
Note: You cannot create an LDAP rule to exclude a specific OU in your LDAP
directory. Instead, limit the authority of the LDAP Administrator you use, removing
access to any OUs you do not want to synchronize.
On the list of Search Rules, you can change existing rules:
• Reorganize: Click the up arrow or down arrow icon to change the order of
search rules.
• Edit: Click the notepad icon to edit the settings of a search rule.
• Delete: Click the X icon to delete a search rule.
Search rules are processed in the order listed. If you would like one search rule to
take priority over another, move that search rule up using the up arrow icon on this
page. If two rules contradict each other, the first rule takes precedence.