GSuite AD Sync - Exception rule

[snagrat]

I have GSuite setup for an Academy with 3 schools currently using it for Chromebooks. The OUs in GSuite are similar to:

 

domain.com

-school1

-school2

-school3

 

I am now looking at introducing syncig GSuite with the AD domain but only want to do one school. My AD is setup pretty much the same so each school is in its own OU.

 

I cannot seem to be able to find a way so that I can only sync one OU of users without disabling the other users. I'm running a Simulate Sync and I can see that all users in school2 and school3 are being disabled.

 

Is there a way I am able to exclude OUs on the Google side so they are not touched at all?

[snagrat]

AH I have figured it out.

 

Originally missed the exclusions available on the Google Domain Configuration page.