Please see the discussion at:Service Desk-Multiple filters for pdm_ldap_sync
The pdm_ldap_sync command does not accept multiple filters.
Customers have contacts that should be imported into SDM when created in AD but some of those need to have their access to SDM managed manually by location,
The current workaround is to let the utility update these and then run a SQL script to flip them back to inactive/active. This is inefficient as it is another step to be maintained when business requirements change.
CA should expand the command to accept multiple filters.