I've created a sync connection with Active Directory in the User Profile Service Application. When the connection was created, some OUs were deselected. Somehow, though, users within these OUs were imported anyways. Now our SharePoint system accounts and [one of our] terminated employees are showing up in the employee directory.

I've tried deleting and re-adding the sync connection with AD.

We also went as far as adding a custom attribute in AD ("employeeDirectory", returns true or false) and using the exclusion filters. The exclusion filters do not seem to be working, either, though (tested by adding a few different filters, then a full crawl).

Do we need to remove the UPSA and re-create it? Is there something else I'm missing?

  • Were they imported or did they access the farm and have a profile create that way. Import is not the only way to create a profile. – Matthew McDermott Nov 4 '15 at 17:20
  • They were imported. None of the "problem profile" users would have accessed the farm. – Kaylee Chatham Nov 4 '15 at 21:21
  • Actually, the SPAdmin account has! That solves that one. Thanks :) – Kaylee Chatham Nov 4 '15 at 21:22
  • Are you actually seeing logged entries for the users in question? If so you need to change your connection filter to exclude them. – Matthew McDermott Nov 6 '15 at 18:04
  • Yes, I am. I've set up an exclusion filter, but it doesn't seem to be keeping them out. Any ideas on why the exclusion filter my not be working? I've tried excluding based on the custom employeeDirectory property, and also by first name (our admin accounts have the same first name property). Neither seems to be excluding anything. – Kaylee Chatham Nov 9 '15 at 17:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.