In old days, we do that using Exclude Keyword on the edit page of Active Directory importation setup. With v4.6.2.4 of NxFilter, you can modify LDAP query...