I have the LDAP filter for finding the accounts that are set to never expire (&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536)) but I also want to add anther filter on to this that exludes accounts that belong to a group called "gr-clinlock" I have not been able to figure this out. any help would be greatly appreciated. Thanks Brian
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
need AD query to find all users set to never expire & ...
- Thread starter engelb
- Start date
WhoKilledKenny
MIS
User not member of group:
You need to specify the DN of the Group and use '!' which means "not."
(!(memberOf=CN=gr-clinlock,OU=groups,DC=Domain,DC=com))
Jesse Hamrick
You need to specify the DN of the Group and use '!' which means "not."
(!(memberOf=CN=gr-clinlock,OU=groups,DC=Domain,DC=com))
Jesse Hamrick
- Status
Similar threads
- Locked
- Question