Hybrid deployments - Directory Scope

Allows for customization of the Directory analysis scope. 

By default, Directory Scope settings are set to analyze the entire directory.

If the 'Specific Organizational Units' option is selected, the Include/Exclude OU/ Exclude OU From Search options and diagram options become available.

• Audit Scope: If empty, all profiles will be loaded. Otherwise, only the selected OU's and their children will be used to load profiles.
• Violation restrictions: Add OU's to be skipped from generating violations.
• Exclude from search: Add OU's to be excluded from search.

An OU scope can be configured by clicking '- Exclude OUs' or '+ Include OUs'.

OUs can then be selected using the picker. 

To keep track of which OUs are included/excluded, clicking 'Diagram' will produce a map of the Active Directory OU structure. Included OUs are marked green, and excluded OUs, are marked red. Inclusion/exclusion definitions are accented with a ring. 

OUs can be excluded or included in Diagram Mode as well. Clicking on an OU will produce options to Exclude, Include, or Inherit:

And for the Exclude OU from search, this will exclude the OU we don't want in the result when we use Directory Search.