These are my "filter" stylesheets. They are a pair of stylesheets that filter all unwanted deletions and editing from AD or another directory into NDS.
If AD is the Directory in which we sync users and groups from NDS (in some cases) we don't want the AD administrator to tamper with our NDS users. Or (and this is important) -- as AD can't create groups with the same name in different contexts as NDS can, users in various groups can be deleted from there groups, based on the modify events from AD.
This stylesheet filters and blocks that process. But, it doesn't block password sync!