we have few users in alfresco local database and we have migrated some of the users to AD. my question is:
1. if we do full sync with AD and enabling synchronization.allowDeletions will affect local users in alfresco ?. because our existing user query in ldap-ad chain brought up all the computer and service accounts into alfresco. existing person query in ldap-ad chain is (&(objectclass=user)).
2. if i modify the user query to (&(objectclass=user)(userAccountControl=512)), it will bring only active users from AD. does all junk users will gets cleanup if i only modified the query alone or do i need to do a full with AD anyways.