The following example shows a local <policy> element located on the hrsvc service, and a global <policy> located after the <Canonicalizations> section.
<LdapConfig> <Tls ... /> <Services> <Service Id="hrsvc" ... /> <Service Id="domain2" ... /> <Service Id="domain3" ... /> <Policy ..."/> </Policy> </Service> <Services> <Canonicalizations> ... </Canonicalizations> <Policy .../> </Policy> </LdapConfig>