Filter for selecting active users from AD/LDAP

Below is a filter for selecting only active user accounts in ActiveDirectory:

(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))​​

 

where :1.2.840.113556.1.4.803: is a bitwise AND in the LDAP format.

 

Enter this filter in the field Filter for importing and synchronization in Administration - System - System Settings - External authentication modules in the Import Users unit of the New external authentication module window (fig. 1)

Fig. 1.  New external authentication module dialog box. Import Users unit. Filter for importing and synchronization field.