I'm curious to know how many of you are controlling synchronization
between systems. For example, how do you keep certain user accounts
from synchronizing to systems you don't want them on?

For example, I have several users in a particular context that need
access to Lotus Notes, however, there are some users that shouldn't have
Notes accounts. Do you create a group and ask the driver to look at
whether or not they are a member of that group? If so, at what point in
the policy flow do you check for this--first thing in the subscriber
event transformation, or do you only do the group lookup if the if the
operation is an add (in the create policy)?

Thanks for any input...