Hi all: When we first started using IDM, it was simply to add eDir users to a domain in a flat structure. I still do not need a full mirrored sync, I do want to move users into different OUs just to keep them straight. I can manually move newly created users, but I need to change where/how the driver searches for users.



Currently the driver just looks in:

CN=Users,DC=XXX,DC=AD



I would like the driver to look in these three locations:

CN=Users,CN=SITE1,DC=XXX,DC=AD

CN=Users,CN=SITE2,DC=XXX,DC=AD

CN=Users,CN=SITE2,DC=XXX,DC=AD



Which policy controls the searching?