I would like to be able to exclude certain AD accounts from getting an exchange mailbox. So it should become an entitlement of the AD Target Connector, just like account access for instance. Now I have to create 2 AD target systems to achieve this.