1. To decide whether to inactivate users who are not part of a group in the sync process, go to Settings ➔ System Parameters ➔ System Parameters ➔ LDAP / Active Directory.