I'm trying to set-up synchronization between my OpenLDAP server and Google Apps. There are some users accounts already created in Google Apps which are not in my OpenLDAP server. That accounts are suspend every time, when I perform synchronization. According to GADS documentation it's possible to create exclusion list which contains user's account that shouldn't be synchronized. But as I've understood from the documentation exclusion lists should contain only local LDAP user accounts than shouldn't be synchronized with . Am I wrong or is there any solution for this situation?
In GADS, there are sections to both ignore AD accounts (do not create Google Apps Accounts), and ignore Google Apps accounts that don't have a corresponding AD account. I used this second section to protect administrator and other important accounts from accidental deletion. Keep fishing around in the settings and you'll find it.
The setting is found in the Google Apps Configuration section. Here is a link in the manual.
Google Apps Exclusion Rules:
AD User Exclusion Rules: