How do I query for users in active directory?

[data-usr]

How do I query for users in active directory using DataFlows?

[andyvidan]

You can use the Active Directory Query Module.

Uri input value would be LDAP://ldapservername

To get a list of the LDAP servers you can run: nltest /dclist:DOMAINNAME on the commandline. Replace DOMAINNAME with the name of your domain.

Filter / query input for users would be: (&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))

The column input can be used to select only certain fields.

[andyvidan]

A good starting set of fields to cover most use cases would be the following:

["givenname","mail","title","homephone","department","telephonenumber","userprincipalname","description","st","samaccountname","initials","sn","cn","name"]

[andyvidan]

A sample DataFlow can look like this:

To Query for an ACL:

1. First, find the distinguished name using the following query: (&(objectCategory=group)(cn=nameOfACL))

2. Then, use this to query for users in the ACL, as follows:
   (&(objectCategory=user)(memberOf=CN=nameOfACL,OU=O365 Groups,OU=Groups,OU=Global Infrastructure,DC=MFCGD,DC=com))