Need Help with an AD LDAP Query to not sync groups

Hi,

I have researched and researched trying to get my total Users down below 70k, and I am unable to do it in SCSM. I can do it in AD, I can get it down to just under 15k, but when I put that Query in SCSM it still brings in 65-70k. In my research I saw a post here where it shows that SCSM actually wraps my query into it's own query  -- (|(&(objectCategory=person)(MY QUERY HERE))(&(objectCategory=group)(MY QUERY HERE, ALSO))) -- and I think this is what is messing me up. I believe from this that I am importing groups as well as active users, and I do not want groups.

I considered importing per OU, but we use over 30 OUs for active Users, so this is not a good resolution either.

I would like to import ONLY Active Users, no groups, and if possible no service accounts, but I can live with service accounts for now, if someone can help me do a query that eliminates groups from what SCSM inputs on my query.

If I can get my connector down to under 20k users, it would be awesome!

Thanks for any help you can give me!

September 14th, 2015 1:05pm