I am attempting to filter out a subset of users in Active Directory from being pulled into the User Profile Service. The users need to be filtered by the Organizational Unit property (ou), which is also present in the Distinguished Name property (dn).

So I'm trying to do this by editing the connection filters on my AD User Profile Synchronization Service connection, however I can't get it to work using an ou Contains blah filter. "dn" is not an option in the drop down to filter by.

How can I prevent these users from being imported?

1 Answer 1


I rectified this by editing the User Profile Service Synchronization Connection to Active Directory (Central Admin > Manage Service Applications > User Profile Service > Configure Synchronization Connections > Select Connection > Edit).

Then I just deselected the specific OUs in the Containers window. It takes a few seconds (or sometimes 20) to load once you click to deselect the OU so be patient. It's working on it.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.