Solved

Sharepoint Import User & Profiles

Posted on 2011-03-02
5
474 Views
Last Modified: 2012-05-11
Hi guys,

I would like to know if correctly. I'm trying to correct my connection with AD.  I already have the connection to AD but in the "User filter:" I would like to know if it's ok this query to exclude all disabled accounts and users start with "s-" because all users started with "s-" is a Service Accounts.

Exclude accounts that start with s-
(&(objectCategory=Person)(objectClass=User)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(!givenName=s-*)))

Also I would like to know a best practice to syncronize the import schedule (Full & Incremental) for a Big Farm.

I supose this:
1- Full Every 1 Month
1- Incremental Every 1 Week.

It's OK?.

Is Sharepoint 2007.

Thanks in advance,
0
Comment
Question by:Gonzalo Becerra
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 9

Assisted Solution

by:Ivan Padabed
Ivan Padabed earned 200 total points
ID: 35023350
generally OK. although I would do incremental sync once a day (night). But it depends on farm load and operation time for your particular environment
0
 
LVL 1

Author Comment

by:Gonzalo Becerra
ID: 35025671
My query to import enabled account and exclude all account starting with s- it's ok?

0
 
LVL 38

Accepted Solution

by:
Justin Smith earned 300 total points
ID: 35025989
I'm thinking it should be:

(&(objectCategory=Person)(objectClass=User)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!givenName=s-*))


I'll agree with Ivan about daily imports.....but yes it does really depened on your environment.  My current client is modifying AD users daily, so that needs to be reflected in SP daily.
0
 
LVL 1

Author Comment

by:Gonzalo Becerra
ID: 35026375
We need syncrinize about 190000 users. I think one increment per week and 1 full per month.

Actually we don't have configured incremental or full is not sincronizing now.

Which is the correct?.

(&(objectCategory=Person)(objectClass=User)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!givenName=s-*))

This correct?
(&(objectCategory=Person)(objectClass=User)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(!givenName=s-*)))
0
 
LVL 38

Expert Comment

by:Justin Smith
ID: 35026479
You could try both, and see if either work.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question