Remove all LDAP groups during sync with Group Schema Filtering

Question

I would like to not include AD groups during my User synchronization from AD.

My current Group Object filter (found under Group Schema Settings) is:

(&(objectCategory=Group)((cn:=xyz)))

This assumes there is no group in our AD labeled "xyz". This works, but is a hack way of accomplishing what I am trying to do.

Is there any way to ignore all groups from AD via filtering? I do not want to ask our LAN team to create an empty OU to reference.

Thanks!

Daniel Eads · Accepted Answer

Hi Paul,

That's a good hack to get started! This question has been raised on Community before and the answer was pretty similar. Instead of using a fake Common Name though, you can just use a fake object:

(objectCategory=DummyValue)

Cheers,
Daniel