Rule Based Group - Specific Criteria for distinguishedName

Question

Hi,

I would like to exclude users from a rule-based group where distinguishedName contains "Special".

Any possibility to achive this?

Answer 1

Hello,

Unfortunately, there is no such possibility due to the way distinguished names are handled in Active Directory.

Comments

Hi,

is this planned for future? Or maybe add option to run a PS script and include users based on output?

---

Hello,

is this planned for future?

As we mentioned in the previous post, the limitation comes from AD itself. It is not related to Adaxes. We are not aware of any Microsoft plans to change the behavior.

Or maybe add option to run a PS script and include users based on output?

There are currently no such plans. However, a script would still not work due to the very same limit coming from AD. If there is some other AD property you can use for filtering, you can try using the Query results membership rule.