How to exclude the user table using the drush sql-sync command
You can use --skip-tables-list flag on your drush sql-sync command 

drush sql-sync @prod @dev --skip-tables-list=user


the table lists should be comma seperated.

For more options on sql-sync check this documentation.