i want to create a ad connection in user profile service application, which sync specific users. These users are members of a group. When i check this group in the "AD Container" and start a full sync, none of the group members is synced. Question: How can i sync AD users without checking them directly in the "AD Container"?


You need to select the OU, not the group. You can use exclusion filters to define who not to select. See this article below by Spence Harbar.


| improve this answer | |
  • All Users in this AD are in the CN=Users Container. The User group i want to sync is in a OU. Even when i select this OU, none of the group members is synchronized. – spuser Jun 22 '11 at 7:42
  • Additionally you can review this post by the SP Escalation Team: blogs.msdn.com/b/spses/archive/2011/05/31/… – Jesus Shelby Jun 22 '11 at 15:49
  • Thank you for this link, looks like syncing users via groups are not supported. Maybe one these options is applicable for my szenario. – spuser Jun 23 '11 at 6:16
  • I know it's a while after the fact but I'm still too much of a newbie here to up-vote; this q & a is very useful as it is the most clear-cut explanation and answer to what I'd think to be a common starting question re: AD sync and how SP handles groups and members (and how it's better to think in terms of OUs instead). You deserve a lot more up votes for this! Thanks. – Beeblebrox Oct 10 '11 at 22:16
  • @foocode: With a bit more reputation, you will be able to post comments everywhere. Try answering a couple questions and you should get your rep up quickly. :) – Kit Menke Oct 11 '11 at 12:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.