removing old accounts

hi, we synchronize our accounts with active directory.

But when an account is changed, for example the lastname or displayname. and we import again.

Then we have duplicate accounts. Also accounts which are moved to OU's we don't want to import stay in the Service Desk.

How can this be solved?

Jeroen