When you filter by organizational unit, there are no issues. You can select the specific OUs that you want synchronized an it will work.
When you attempt to filter by domain, you will get the following error that is visible in Synchronization Service Manager:
Step Type: Full Import (Stage Only)Despite the fact the Dirsync graphical interface is perfectly fine with deselecting a domain, the scripts created during the installation for performing synchronization are not. You can view the code for the steps and probably could edit that code, but that's a little risky for my tastes. Instead the suggested work around is:
- In each domain you want to filter, create an empty OU.
- Configure OU filtering for each domain you want to filter to include only that empty OU.