Hey there,

Does anyone know what AD attributes are allowed to be used for UPS exclusion filter?

Like department, description, e-mail etc. (https://msdn.microsoft.com/en-us/library/ms675090(v=vs.85).aspx)

What I am trying to accomplish is to filter specific users from AD Trust based on some criteria.

OU is not possible because users are splitter across multiple OUs because of GPOs.

Currently all users that have to be synced are part of an ad group but as I saw filtering by group is not supported by exclusion filters so I am looking for another solution.

Thanks!

Regards,

Ognyan

Hi Ognyan,

I understand you are using SharePoint Profile Synchronization, and you want to apply filters on connection by group. I found a relevant article for your reference:

http://blogs.msdn.com/b/spses/archive/2011/05/31/sharepoint-2010-profile-sync-inability-to-import-users-based-on-group-membership.aspx

Here are 4 options offered as workaround, you could select another user ad attribute for filter.

Regards,

Thank You Rebecca!

Do you have information if there is some limitation regarding the AD attributes that can be used?

Regards,

Ogy

Hi,

As I observed, not all AD attributes appear in the list which can be set as exclusion filter.

Regards,