Google Apps Directory Sync for Postini Services Administration Guide - Manual (Page 31)

34 Release 1.3.32, October 2009
Any existing user in the specified orgs will be deleted if they are not in the user list
generated from your LDAP server. Any users not in these orgs will be added (or
moved from another org) if they are in the user list generated from your LDAP
server. After synchronization, your users in the message security service will be
the same as your users on your LDAP server. You make exceptions to this
behavior by using exclusion filters.
Choose which orgs to synchronize:
• All users in all orgs under your Postini account: All organizations visible
to the administrator account (specified in the Server section) are included in
synchronization.
• Hierarchy: All organizations under an organization you specify here are
included in the synchronization. Enter the org name (not IID) here. The org
name is case sensitive. Match the same case as the org name in the
message security service.
• Specific orgs: Only the specified organizations are included in the
synchronization. Enter each org name (not IID) and click Add to add it to the
list. To remove an organization from synchronization, select that organization
on the list and click Remove. Org names are case sensitive. Match the same
case as the corresponding org name in the message security service.
Exclusion Filters for Service Settings
If you have any users on your message security service user list who should not
be deleted or moved by the synchronization, add an exclusion filter to protect
those users.
Other exclusion filters you might want to include are:
• Default users
• Administrators who are not in your LDAP system in the OUs you specify
• Users in the message security service who are listed on a different LDAP
server