I've created a sync connection with Active Directory in the User Profile Service Application. When the connection was created, some OUs were deselected. Somehow, though, users within these OUs were imported anyways. Now our SharePoint system accounts and [one of our] terminated employees are showing up in the employee directory.
I've tried deleting and re-adding the sync connection with AD.
We also went as far as adding a custom attribute in AD ("employeeDirectory", returns true or false) and using the exclusion filters. The exclusion filters do not seem to be working, either, though (tested by adding a few different filters, then a full crawl).
Do we need to remove the UPSA and re-create it? Is there something else I'm missing?