This article applies to:
Description:
SmartDL Query Designer allows either inclusion or exclusion of disabled users by selecting userAccountControl attribute with a condition of Flag off(to exclude disabled users) or Flag on(to include disabled users) and value of 2. One way of working around the exclusion would be to create a group of all disabled users in Active Directory. Then add the group of disabled users to the query by applying the filter memberOf attribute with a condition of Is (exactly) and a value of cn=disabledUsersGroup,dc=domain,dc=com (distinguishedName of the group) in the SmartDL query designer with your additional criteria to include only disabled accounts to the group membership that apply to the specified query.
So the end result will add members to the group that apply to the specified criteria when it performs a search in Active Directory, and any members of the disabledUsersGroup that apply to the criteria, as well. The example below is based on this scenario:
AND
|
|_____ displayName Contains A
|_____ displayName Not contain X
|______ msExchHideFromAddressList Is not True
|______ extensionAttribute1 Is (exactly) Department X
|
|___OR
|___ userAccountControl Flag off 2
|____ memberOf Is (exactly) cn=disabledUsersGroup,dc=domain,dc=com