You can import specific computer accounts or user accounts rather than an entire group structure from a directory server into Symantec Endpoint Protection Manager 12.1.x groups. You should import specific accounts if you want to apply different security policies for the accounts in an organizational unit.
For example, you might want to maintain remote computers in one group. You would create a group for remote computers and assign a group policy that is tailored for remote computers in that group. You can then search for and import computers from the organizational unit directly to the remote group.
If you do not want to import specific accounts, then you can import all accounts within an organizational unit.
To search for and import specific accounts from a directory server