How to filter ad account to sync ,we want filter disabled accounts, no email account, and the account like administrator.
To apply filters by Organizational Unit (OU) in Directory Sync Pro for Active Directory, you can use the default User OU Filter and Group OU Filter available when creating a synchronization profile.
During profile creation, you can define LDAP filters for users and groups. The default filters are:
User OU Filter:(&(!(adminDescription=Created By DirSync))(|(objectClass=Person)(objectClass=room))(!(objectClass=computer)))
Group OU Filter:(&(!(adminDescription=Created By DirSync))(objectClass=Group))
These filters can be customized to further restrict results. For example, to synchronize only users from a specific department:(&(objectClass=User)(objectCategory=Person)(department=Accounting))
Filters are applied per OU and include sub-OUs when the Sync Sub-OUs option is enabled. It is strongly recommended to test all LDAP filters using the Active Directory Users and Computers (ADUC) console to prevent synchronization failures caused by invalid filters.
Additional sample filter formulas are available in the Directory Sync Pro User Guide.
Note: Custom filter formulas and filter configuration are outside the scope of technical support. Quest Professional Services (PSO) is best suited to provide guidance in this area. Support can share sample filters from documentation for reference and testing purposes only.
