Active Directory: How to sync only users under certain OUs

[Dieter Scheruga]

My base dn is like : OU=CEE,DC=xyz,DC=at

unde CEE there are furhter OUs for countries: AT, CZ, HR etc.

There are furhter OUs I don't want to sync.

How can I only sync users from AT or CZ or HR etc.?

Under 'Additional Group DN ' I don't know how to write OR: OU=AT|CZ etc. doesn't work

Maybe also a user filter would work. But I don't know how to say "under the OU=AT or OU=CZ" etc.

Thanks for help

Dieter

[Dieter Scheruga]

I found "my" solution in filtering for users in a certain (nested) group:

(&(objectCategory=Person)(sAMAccountName=*)(memberOf:1.2.840.113556.1.4.1941:=CN=MyGroup,OU=ou1,OU=ou2,OU=User Groups,OU=AT,OU=CEE,DC=XY,DC=at))

But i would still be interested in a solution based on OUs

BR

Dieter