How can I exclude users in a specific OU from object selection for 'Delete User' ?

Question

Hi there,

I've created a Delete User feature in the Web Interface Configurator. I am trying to restrict object selection via a User Criteria. Need to exclude Service Accounts, but they have no attributes which separate them from regular users except for their organisational unit.

My service accounts are in two OUs, as per the screenshot below (see LDAP filter) - unfortunately this did not work.

(&(objectClass=user)(!(|(distinguishedName:dn:=OU=Service Accounts,OU=Global Users,OU=Everlight Radiology,DC=ipo,DC=local)(distinguishedName:dn:=OU=Everlight Service Account,DC=ipo,DC=local))))

I can successfully exclude accounts based on SAM Account Name - But I've tried using multiple LDAP filters to exclude these OUs based on the distinguished Name of the object containing the path to the OUs - without success.

I've also tried using the "Organizational Unit is not <OU>" criteria - Attempting this with: is not, does not contain, does not end with - No luck. Tried changing the OU to just the name e.g. "Service Accounts" and also the full DN.

Can anyone suggest a filtering method that should work? End goal is that any user object in a specific OU won't appear when selecting target user for the 'Delete User' feature.

Thanks,

David

Answer 1

Hello David,

Unfortunately, there is no such possibility due to the way location queries work. You can only specify a single location in the Only objects located under option. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.