how to filter some accounts from AD
I have some general accounts in Active directory not belong to users but we need them, like Admin, training, temporary...etc
I also have some accounts for testing purposes in SharePoint like (testSupervisor, TestChief..etc)
How can I hide those accounts from being displayed in the people search?
in the Central Administration-->configure import profile--> I have this filter
(&(objectCategory=person)(objectClass=user)( !(userAccountControl:1.2.840.113556.1.4.803:=2)))
(which is filtering disabled accounts)
October 16th, 2010 12:46pm
Hi
I'm playing around the Central Administration, and I think I just need to hide those users from being displayed in the people search result.
I clicked in the
Search Administration > Scopes > Scope properties and Rules > People
there is one rule (include behavior) : contentclass=urn:content-class:SPSPeople
I think I have to add a new rule of type (exclude behavior) but I don't know what to type in it.
can anyone help please
Free Windows Admin Tool Kit Click here and download it now
October 16th, 2010 1:39pm
Hi Aysha,
This is just an idea, but if you put all the users you don't want in a group, you will be able to exclude that group using this filter :
(&(objectCategory=Person)(objectClass=User)(!(memberOf=[distinguised name of the group])))
Here is a good link to some others examples of filter :
http://sharepointsherpa.com/2008/03/14/sharepoint-2007-ldap-user-filters-for-limiting-user-profile-import/
Todd Klint has a good article to help you create a more complex filter :
http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?List=56f96349%2D3bb6%2D4087%2D94f4%2D7f95ff4ca81f&ID=177
Hope it helps you, MarioMon Blog/My Blog (in french)
LinkedIn
October 16th, 2010 6:08pm
okay,, if the sharepoint administrator account is part of the group that i want to exclude, am i going to be able to use this account to login to the sharepoint? or i will loose this?
Also I have some testing accounts like (supervisor, chief) used for testing permissions and sending workflow emails. Those accounts are part of the group to be excluded, am i going to use them after applying this filter?
Free Windows Admin Tool Kit Click here and download it now
October 16th, 2010 8:04pm
You will be able to login to sharepoint.
It's also possible to use your testing accounts even if they are not imported in profile. Windows Sharepoint Services 3.0 (the free version of Sharepoint) doesn't have profile functionnality and it's possible to do all you want.Mon Blog/My Blog (in french)
LinkedIn
October 17th, 2010 9:40pm
Thank you.... The tutorial in the second links was really helpful
Free Windows Admin Tool Kit Click here and download it now
October 24th, 2010 8:22pm