We are just starting to use the Organization browser webpart in our local intranet. While working with it we've noticed that disabled AD accounts are showing up in the list. Is there a way to filter the webpart to only bring back AD accounts that are enabled?

1 Answer 1


Yes, you could go to your user profile synchronization service to remove disabled accounts from the synchronization process. Here is where I found the solution.

  1. Go to your central administration website
  2. Click on "Application Management"
  3. Click on "Manage Service Applications" under "Service Applications"
  4. Click on the "User Profile Synchronization Service"
  5. Click on "Configure Synchronization Connections" under "Synchronization"
  6. Click on your connection and select "Edit Connection Filters" in the context menu
  7. In the "Exclusion Filter for Users" section fill in "userAccountControl" for Attribute
  8. Fill in "Bit on equals" for operator
  9. Fill in "2" for filter
  10. Click the "Add" button
  11. Click the "OK" button at the bottom of the page

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.