<?xml version="1.0" encoding="UTF-8"?>
	   <policy>
		<rule>
			<description>Only synchronize the Employee and Contractor subtrees</description>
			<conditions>
				<and>
					<if-src-dn op="not-in-container">Employees</if-src-dn>
					<if-src-dn op="not-in-container">Contractors</if-src-dn>
				</and>
			</conditions>
			<actions>
				<do-status level="warning">
					<arg-string>
						<token-text xml:space="preserve" xmlns:xml="http://www.w3.org/XML/1998/namespace">Change ignored: Out of scope.</token-text>
					</arg-string>
				</do-status>
				<do-veto/>
			</actions>
		</rule>
		<rule>
			<description>Don't synchronize moves or renames</description>
			<conditions>
				<or>
					<if-operation op="equal">move</if-operation>
					<if-operation op="equal">rename</if-operation>
				</or>
			</conditions>
			<actions>
				<do-status level="warning">
					<arg-string>
						<token-text xml:space="preserve" xmlns:xml="http://www.w3.org/XML/1998/namespace">Change ignored: We don't like you to do that.</token-text>
					</arg-string>
				</do-status>
				<do-veto/>
			</actions>
		</rule>
	</policy>

