Provide ability to not sync AD disabled accounts/Domain Admin accounts
It would be great if there was the ability when running the AD Sync that we could exclude certain accounts based on parameters. Example would be to stop syncing AD accounts that are disabled, not to sync AD contacts.