We want to control only a specific OU (and sub-OU's) with Persons in Active Directory. We want to exclude all our admin-accounts, rooms and other OU's. Otherwise we must always exclude those accounts.
Twan Duvigneau
You can also specify the access on the service account used for the provisioning service, that would give the same result
