So, I fully understand how to add trusted domains (we have a one way trust with corporate, and can pick from their AD just fine), and have scoured this document , but I didn't know if there was a way to remove the domain the server is built on from the PP.

Essentially we migrated our users over to corporate AD, but people are still getting confused and adding accounts from the wrong AD environment.

Anyone tried this?

  • what do you mean with PP ? – Mohamed El-Qassas MVP Jul 25 '16 at 19:42
  • People Picker, sorry for the shorthand. – Brian Jul 26 '16 at 21:54

You can use below command to configure People Picker to only search in a particular AD domain

stsadm -o setproperty -pn peoplepicker-searchadcustomfilter -pv "(|(&(mail=*)(userPrincipalName=*domain.com))(objectcategory=group))" -url http://webappurl
  • So, this seems to work great in dev, but I do have a question as to what the below parameters are doing. (&(mail=*) and (objectcategory=group) – Brian Jul 26 '16 at 21:55
  • It means import only users which has an email address associated.. just eliminating system users account – Amal Hashim Jul 26 '16 at 21:56
  • Ok. So, it worked in our 2010 environment, but not in 2013. Should it work there as well? – Brian Jul 27 '16 at 21:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.