Hello,
How would it be possible to determine which accounts have been updated without exploring all of them ?
Even if we suppose the accounts to have a kind of "lastupdateddate" attribute, any way to determine the set of the relevant accounts will be equivalent to a full explore.
So there is no existing configuration for the explore feature that will process this way.
However if you already have (through an external process) the set of the "updated" accounts you could process through ldapsearch commands as provided withinExplore Single user in AD community post.
But we do not recommend this approach against large set of accounts because each ldapsearch command will bind to the Provisioning Server and so is consuming memory and CPU.
best regards, Laurent