I am using sp 2010. I would like to exclude expired users from the AD sync connection. How can I implement this?
NOTE I mean Expired date and not Disabled.
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It only takes a minute to sign up.Sign up to join this community
You can add an LDAP filter in the synchronisation connection to exclude users based on the accountExpires attribute e.g.
You can generate the 64bit number using PowerShell. I generated the number in the example as follows:
To add the filter edit your sync connection. Locate the user filter box and add the following filter:
You can verify this returns the results you want from AD first by selecting find and then custom search and pasting in the above query.