Symantec Encryption Management Server can exclude users if LDAP Customizations have been made