User Profile Imports: How to Filter out Disabled Users

Here is how to filter out disabled Active Directory user accounts from your User Profiles.

The default after setting up your connection is to pull back all Active Directory users. To change that you need go to the Configure Synchronization Connection screen, then use the drop down and select Edit Connection Filters.

As you can tell from the top section, you currently have no filters on the user accounts being imported. In the second section, set the following fields:

• All Apply (AND)
• Attribute: userAccountControl
• Operator: Bit on equals
• Filter: 2

Click Add, and then scroll down to click Ok. As you scroll down, notice that you can also set filters on Group accounts.

Now, after your first full profile sync import or your next incremental profile sync import, you will only have active user accounts.