Speaking of LDAP import filters...

...

By default, the first full import of Active Directory users and groups into Identity is carried out after the LDAP connection has been configured in SmartSync, when the service is started for the first time, respecting the user import and group import filters configured in the AD registry within Identity.

...

<div class="lms">
	<div class="lms-callout">
		<div class="lms-callout-image">
			<img class="lms-callout-thumb" src="http://tdn.totvs.com/download/thumbnails/286221066/importante.png" width="24" height="24">
		</div>
		<div class="lms-callout-body">
			<p class="lms-callout-text"><b>Notification!</b><br>If the default SmartSync filter is modified by another filter with incorrect syntax, or the filter conditions are not valid, the import of users may not be performed.</p>
		</div>
	</div>
</div>

User import filter

...

When configuring a domain in SmartSync, you can set the criteria for the first import of users from Active Directory to Identity through the User Filter field.

...

Group import filter

...

When configuring a domain in SmartSync, you can set the criteria for the first import of users from Active Directory to Identity through the Group Filter field.

...