We are planning on importing a lot of our users in our K1000 and we want to prevent the scenario of garbage in/garbage out. Is there a way to filter it so only ACTIVE users in AD are imported? Second is there a way to actively remove disabled/deleted accounts in AD automatically vs manual cleanup? 

my current filter looks like this 
Base DN: OU=Users,OU=Company,OU=Hosted,DC=DOMAIN,DC=local 
Advanced Search: samaccountname=KBOX_USER

I asked support and they said this isn't a feature now. Not sure how difficult this is to implement but if they query LDAP server for status of user why not provide an option to remove disabled/inactive users?

Thanks
2 Comments   [ + ] Show Comments

Comments

  • See if this will work for the Search Filter:
    (&(samaccountname=KBOX_USER_NAME)(&(objectCategory=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))))
  • Thanks that worked. I had to change from KBOX_USER_NAME to KBOX_USER for the filter to work.
Please log in to comment

Answers

2
See if this will work for the Search Filter:
(&(samaccountname=KBOX_USER)(&(objectCategory=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))))
Answered 06/08/2016 by: KACE_Irwin
Fourth Degree Green Belt

  • Depending on whether your using the browser or ldap setup, you may want to try and interchange (&(samaccountname=KBOX_USER) with (&(samaccountname=*)
Please log in to comment
Answer this question or Comment on this question for clarity