Sharepoint Import User & Profiles

Hi guys,

I would like to know if correctly. I'm trying to correct my connection with AD.  I already have the connection to AD but in the "User filter:" I would like to know if it's ok this query to exclude all disabled accounts and users start with "s-" because all users started with "s-" is a Service Accounts.

Exclude accounts that start with s-
(&(objectCategory=Person)(objectClass=User)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(!givenName=s-*)))

Also I would like to know a best practice to syncronize the import schedule (Full & Incremental) for a Big Farm.

I supose this:
1- Full Every 1 Month
1- Incremental Every 1 Week.

It's OK?.

Is Sharepoint 2007.

Thanks in advance,
LVL 1
Gonzalo BecerraSharePoint - Technical Lead for Operations & Engineering Team - Superrvising AssociateAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Justin SmithConnect With a Mentor Sr. System EngineerCommented:
I'm thinking it should be:

(&(objectCategory=Person)(objectClass=User)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!givenName=s-*))


I'll agree with Ivan about daily imports.....but yes it does really depened on your environment.  My current client is modifying AD users daily, so that needs to be reflected in SP daily.
0
 
Ivan PadabedConnect With a Mentor Director, Technology SolutionsCommented:
generally OK. although I would do incremental sync once a day (night). But it depends on farm load and operation time for your particular environment
0
 
Gonzalo BecerraSharePoint - Technical Lead for Operations & Engineering Team - Superrvising AssociateAuthor Commented:
My query to import enabled account and exclude all account starting with s- it's ok?

0
 
Gonzalo BecerraSharePoint - Technical Lead for Operations & Engineering Team - Superrvising AssociateAuthor Commented:
We need syncrinize about 190000 users. I think one increment per week and 1 full per month.

Actually we don't have configured incremental or full is not sincronizing now.

Which is the correct?.

(&(objectCategory=Person)(objectClass=User)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!givenName=s-*))

This correct?
(&(objectCategory=Person)(objectClass=User)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(!givenName=s-*)))
0
 
Justin SmithSr. System EngineerCommented:
You could try both, and see if either work.
0
All Courses

From novice to tech pro — start learning today.