How can I prevent to import deactived users from Microsoft Active Directory ?

0 1	If I use active directory to synchronize AD users with Xpert.ivy Server also deactivated users are imported. How can I prevent that? activedirectory ldap asked 07.01.2014 at 15:13 Reto Weiss ♦♦ 4.9k●20●28●57 accept rate: 74%

One Answer:

active answers oldest newest most voted

If you don’t want to import deactivated user from Microsoft Active Directory you can changed the user filter in the Microsoft Active Directory settings as follows:

(&(objectClass=user)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

The expression !(userAccountControl:1.2.840.113556.1.4.803:=2) checks if bit 2 of the userAccountControl attribute is not set. Bit 2 marks if the user is deactivated.

Be careful with changing the filter because a wrong filter could cause that all users are deleted in Xpert.ivy Server.

link

answered 07.01.2014 at 15:16

Reto Weiss ♦♦
4.9k●20●28●57
accept rate: 74%

edited 16.05.2018 at 08:50

Reguel Werme... ♦♦
9.4k●3●19●58

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

ldap ×19
activedirectory ×16

Asked: 07.01.2014 at 15:13

Seen: 2,612 times

Last updated: 16.05.2018 at 08:50

How can I prevent to import deactived users from Microsoft Active Directory ?

Follow this question

Related questions