can we exclude users that belongs to a specific ou when importing them to keycloak
From my research this is not possible with ldap filter. AD in particular does not support certain ldap extensions that may have helped. In particular, distinguishedName= does not support wild cards - if it did then it would work.
If you have discovered that you can do it, do let us know.