How can I exclude disabled users from my user profile synchronization?

Question

I have my user profile synchronization setup and working but I have noticed that disabled users who no longer work for my company are showing up in the sync. I would like to update the sync so that it only pulls in active users.

Answer 1

I found my solution from this blog.

1. Go to your Central Admin website
2. Go to "Application Management"
3. Go to "Service Applications -> Manage Service Applications"
4. Click on "User Profile Service Application"
5. Click on "Synchronization -> Configure Synchronization Connections"
6. Click on your connection and select "Edit Connection Filters" from the menu

7. Add a new Exclusion Filter for Users and select "userAccountControl" as the attribute, "Bit on equals" as the operator, and "2" as the filter. Make sure also that you correctly have AND and OR selected if there are any other exclusion filters already there.

   userAccountControl Bit on Equals 2

8. Click "OK"

The next time that it syncs your disabled accounts should be gone.