LDAP sync with MS Active Directory

[Deleted user]

is it possible to just synchronize one distribution group from AD , not all distribution groups ? 

I have all the groups, all the users for now, kind of too much :-) 

[zack]

Yep!

In User Management > User Directories, edit your User Directory, and open the Group Schema Setting section. From there, you can use an LDAP Object Filter to declare which groups you want to sync, or which groups you explicitly do not want to sync.

For example, this filter query would sync all groups except "DistGroup1" :

(&(objectClass=group)(!(cn=*DistGroup1*))

Here is some good info:

https://confluence.atlassian.com/crowd/restricting-ldap-scope-for-user-and-group-search-169118612.html

[Deleted user]

(&(objectClass=group)(cn=*DistGroupIwant*))   I used for just one group to sync, working , but result kind of confusing, although other groups disappeared, the group I want kind of nobody inside after sync from LDAP :-(

so I wonder whether I should adjust other settings as I only 'touched' the following:

Group Schema Settings:

Group Object Class:  top:group

Group Object Filter:  (&(objectClass=group)(cn=*DistGroupIwant*)) 

Group Name Attribute:  cn

Group Description Attribute: description