So, I fully understand how to add trusted domains (we have a one way trust with corporate, and can pick from their AD just fine), and have scoured this document , but I didn't know if there was a way to remove the domain the server is built on from the PP.

Essentially we migrated our users over to corporate AD, but people are still getting confused and adding accounts from the wrong AD environment.

Anyone tried this?

  • what do you mean with PP ? Commented Jul 25, 2016 at 19:42
  • People Picker, sorry for the shorthand.
    – Brian
    Commented Jul 26, 2016 at 21:54

1 Answer 1


You can use below command to configure People Picker to only search in a particular AD domain

stsadm -o setproperty -pn peoplepicker-searchadcustomfilter -pv "(|(&(mail=*)(userPrincipalName=*domain.com))(objectcategory=group))" -url http://webappurl
  • 1
    So, this seems to work great in dev, but I do have a question as to what the below parameters are doing. (&(mail=*) and (objectcategory=group)
    – Brian
    Commented Jul 26, 2016 at 21:55
  • It means import only users which has an email address associated.. just eliminating system users account Commented Jul 26, 2016 at 21:56
  • Ok. So, it worked in our 2010 environment, but not in 2013. Should it work there as well?
    – Brian
    Commented Jul 27, 2016 at 21:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.