By default Archive Manager will pull in all the members of an OU if the Active Directory Connector (ADC) is set to a specific OU. However, it is possible to use filters in the ADC to target specific users.
Because filters are applied to all the OUs that the ADC is configured to collect users from, a AD attribute would need to be set on all the users that should not be imported and then a filter set to exclude these.
Depending on the number of users that need excluding it is possible to use powershell to add an AD attribute based on the OU. The command would be something like this:
get-aduser -SearchBase | set-aduser -attributetoset "Attribute Value"
The attribute would then need to be removed from the user that needs to be added to Archive Manager. For more information on setting AD attributes, please refer to Microsoft's documentation.
Once set the ADC can be configured as follows:
- Stop the Archive Manager Active Directory Connector Service
- Open the Archive Manager Configuration Console
- Select AD Connector
- Select the domain the user exists and Edit
- Under Advanced Configuration add the OU the user exists to "Containers".
- In Filters add a new "Mailboxes" filter to exclude the attribute you set above.
I the the following screenshot there is an OU in AD called AdminUsers. The users in this OU that should not be imported have the AD attribute "comment=Not AM User":
In this example the filter is set to (!comment=Not AM User).
The ! will exclude anything which matches that value.
The one user that is to be imported this Attribute is not set.
- Click next and Finish and then apply the changes.
- Start the Active Directory service and the user should get created in Archive Manager. NOTE, for the login to get created it must have a mailbox in exchange.
Note: Once users have been imported into Archive Manager, it is hard for them to be removed. Therefore it is recommended that am LDAP explorer tool is used to test the results of the filter prior to them being set to ensure that the correct users will be imported.
© ALL RIGHTS RESERVED. Feedback Términos de uso Privacidad Cookie Preference Center