There are two types of Active Directory synchronization (systems only and systems and structure). Which one you use depends on the level of integration you want with Active Directory.
With each type, you control the synchronization by selecting whether to:
Deploy agents automatically to systems new to ePO - On-prem. You might not want to configure this setting on the initial synchronization if you are importing many systems and have limited bandwidth. The agent MSI is about 6 MB in size. However, you might want to deploy agents automatically to any new systems that are discovered in Active Directory during subsequent synchronization.
Delete systems from ePO - On-prem (and remove their agents) when they are deleted from Active Directory.
Prevent adding systems to the group if they exist elsewhere in the System Tree. This setting ensures that you don't have duplicate systems if you manually move or sort the system to another location.
Exclude certain Active Directory containers from the synchronization. These containers and their systems are ignored during synchronization.