New iFolder 3.8 installation on OES2.

Added context to ldap settings and did the Identity Sync, users were
added to iFolder - those are all Enabled by default.

How to make them Disabled as default?
Or can I somehow specify a group object instead of a context to the ldap

Need to allow iFolder use only for selected users, not all.