If you have a big Active Directory or simply want to limit or specify the AD-objects to sync to the SEP-server you can do so by limiting the AD-sync to specific groups in your AD. We call this selective sync.
How to do a selective sync
You can do a selective sync to your AD. Go to the SEP MC (Management Console) go to Enterprise Manager tab.
Find the directory you want to limit. Right click and select “Directory Properties”.
A new window will appear.
1. Click on the Domain tab
2. Then tick Limit the domain for the following groups
3. Click limit button - a new window appears.
4. Select the groups that you want to import to this AD.