Excluding accounts from a particular OU during the account import - AD Connector

[sreehariv]

Hello Team,

We have a requirement to import all accounts from active directory excluding  the accounts from a particular OU. 

We are trying to achieve this through Active Directory connector (single domain).

We can see "Object filter" and the other is "Advance_Filter_Json" configurations where as we use Object filter to filter the objects based on the conditions such as (&(objectCategory=person)(objectClass=user)(sAMAccountname=*) to filter the objects which are of type user and we use Advance_Filter_Json when we want to import accounts from few particular OUs.

since our requirement is to exclude only one particular OU we have tried using object filter with adding that ou in the condition based on the ldap search filters but it didn't worked out. 

so we were thinking to list all the ous except the one in Advance_Filter_Json configuration. 

Please suggest the best and suitable approach to achieve this requirement

Thanks

Sreehari

[SB]

One way is as you mentioned - to define the list of OU that you wish to import the data from. Alternatively, you can also try the below to exclude the accounts from the OU (abc); you do not wish to import under AccountFilter.

(&(objectCategory=person)(objectClass=user)(sAMAccountName=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(ou=abc)))

Please note: If you use Advance_Filter_JSON it will ignore the values defined in Search and Object filter.