I have a scenario where a client wants to filter in the People Picker what AD Groups are available to choose from. For instance, when selecting what AD User/AD Group can be added to an Alert on a SharePoint List.
The LDAP query can be set for peoplepicker-adcustomfilter property for a Site Collection, but it appears to not affect AD Groups and only "People" e.g. AD Users. The reason I say "appears" is that the Users being returned seem to abide by the LDAP query, but the AD Groups seem to return all of them.
I have already narrowed down the ad forest using the peoplepicker-searchadforests property to the forest and domain I require. But want to filter what groups are shown also. The scenario is that some of the AD Groups are for things like printer groups and file access that aren't relevant to SharePoint.
Could it be the case that the people picker needs a kick to refresh the LDAP query? is this query immediately reflected and all calls dynamically go straight to AD with the LDAP query...or is it cached somewhere? I am assuming this has nothing to do with SSP User Profiles at this point as this same functionality exists in WSS.
TechNet article wasn't that useful on this.