Steven Jones wrote: > I just setup a winsync agreement expect its wiped any IPA user that also > exists in AD. > > Is this expected? if so how do I stop it doing that? The 389-ds winsync plugin is deleting entries that appear to be out of scope, https://fedorahosted.org/freeipa/ticket/2927 rob