Selectively syncing Disabled or Enabled source AD Users

By default, UnitySync will pull both Enabled and Disabled Users from your AD source directory. You may use an Optional LDAP Query Filter to indicate that only Disabled or Enabled should be pulled. This query is based on the value of UserAccountControl.

Enter the following filter syntax in the Users Optional LDAP Filter field on the Source tab to configure your UnitySync connection to pull based on Enabled/Disabled Users status:

• Pull only disabled accounts:
  (UserAccountControl:1.2.840.113556.1.4.803:=2)

• Pull only enabled accounts:
  (!(UserAccountControl:1.2.840.113556.1.4.803:=2))

For more information on UserAccountControl refer to our knowledge base article Working with UserAccountControl.