I am attempting to filter out a subset of users in Active Directory from being pulled into the User Profile Service. The users need to be filtered by the Organizational Unit property (ou), which is also present in the Distinguished Name property (dn).
So I'm trying to do this by editing the connection filters on my AD User Profile Synchronization Service connection, however I can't get it to work using an
ou Contains blah filter. "dn" is not an option in the drop down to filter by.
How can I prevent these users from being imported?