How do I exclude the default Active Directory Groups?

To avoid syncing the default Active Directory and Exchange 2000/2003 Groups, add the following exclude rules to the Exclude.txt of your connection.

:dn:cn=cert publishers \ dn:cn=domain admins \ dn:cn=domain computers \ dn:cn=domain controllers \ dn:cn=domain guests \ dn:cn=domain users \ dn:cn=enterprise admins \ dn:cn=group policy creator owners \ dn:cn=ras and IAS servers \ dn:cn=schema admins \ dn:cn=exchange domain servers \ dn:cn=exchange enterprise servers