DirSync

Just installed/setup DirSync and the initial sync went ok but have a few questions.

How can I configure filtering by OU so it doesn't show all accounts/groups. I was trying to follow this http://technet.microsoft.com/en-us/library/jj710171.aspx but am lost at step 2 as I can't find Identity manager or miisclient.exe anywhere on the DirSync server. It's not a DC and is a 2008 R2 box. I am logged in as a domain admin.

Also, when I ran the configuration I purposely left password Sync unchecked as I wanted to deal with any issues that came up first. To enable that, can I just re-run the configuration wizard and enable Password sync or is there another way?

Lastly, a few account UPN e-mail addresses didn't match up at first sync but subsequent syncs it succeed. Just wondering if some accounts fail at sync.