https://answers.axonivy.com/questions/231/how-can-i-prevent-to-import-deactived-users-from-microsoft-active-directory<p>If I use active directory to synchronize AD users with Xpert.ivy Server also deactivated users are imported. How can I prevent that?</p>enTue, 07 Jan 2014 15:16:06 -0500https://answers.axonivy.com/questions/231/how-can-i-prevent-to-import-deactived-users-from-microsoft-active-directory/232<p>If you don’t want to import deactivated user from Microsoft Active Directory you can changed the user filter in the Microsoft Active Directory settings as follows:</p> <pre>(&amp;(objectClass=user)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))</pre> <p>The expression !(userAccountControl:1.2.840.113556.1.4.803:=2) checks if bit 2 of the userAccountControl attribute is not set. Bit 2 marks if the user is deactivated. </p> <p>Be careful with changing the filter because a wrong filter could cause that all users are deleted in Xpert.ivy Server.</p>Reto WeissTue, 07 Jan 2014 15:16:06 -0500https://answers.axonivy.com/questions/231/how-can-i-prevent-to-import-deactived-users-from-microsoft-active-directory/232