Users that already exist in the system with a matching username or email address will be completely overwritten by the syncing process.

What if you don't want to overwrite them?

You will have to update your LDAP query to exclude those users specifically or exclude an entire group, using the (!(query))  syntax. 

You can find some examples of the search syntax here:

Did this answer your question?