Identity Manager excludes some Active Directory groups from auto assignment to the IT Shop. The Active Directory groups that are to be excluded is configurable with the configuration parameter:
QER\ITShop\GroupAutoPublish\ADSGroupExcludeList. The configuration parameter contains a list of all groups for which automatic IT Shop assignment should not take place. Names given in a pipe (|) delimited list are handled as a regular search pattern.
Example: .*Administrator.*|Exchange.*|.*Admins|.*Operators|IIS_IUSRS