Question:
Can I deactivate the passwordsync in AD-connections?
Answer:
Yes we have this ucr variable for that:
ucr search connector/ad/mapping/user/password/disabled
con.*/ad/mapping/user/password/disabled: <empty>
If the password should not be synced between the UCS LDAP server and Active Directory, this variable can be set to true. If the variable is not set, the password will be synchronized.