We are just starting to use the Organization browser webpart in our local intranet. While working with it we've noticed that disabled AD accounts are showing up in the list. Is there a way to filter the webpart to only bring back AD accounts that are enabled?
1 Answer
Yes, you could go to your user profile synchronization service to remove disabled accounts from the synchronization process. Here is where I found the solution.
- Go to your central administration website
- Click on "Application Management"
- Click on "Manage Service Applications" under "Service Applications"
- Click on the "User Profile Synchronization Service"
- Click on "Configure Synchronization Connections" under "Synchronization"
- Click on your connection and select "Edit Connection Filters" in the context menu
- In the "Exclusion Filter for Users" section fill in "userAccountControl" for Attribute
- Fill in "Bit on equals" for operator
- Fill in "2" for filter
- Click the "Add" button
- Click the "OK" button at the bottom of the page