When you filter by organizational unit, there are no issues. You can select the specific OUs that you want synchronized an it will work.
When you attempt to filter by domain, you will get the following error that is visible in Synchronization Service Manager:
Step Type: Full Import (Stage Only)Despite the fact the Dirsync graphical interface is perfectly fine with deselecting a domain, the scripts created during the installation for performing synchronization are not. You can view the code for the steps and probably could edit that code, but that's a little risky for my tastes. Instead the suggested work around is:
Partition: DC=deselectedSubdomain,DC=domain,DC=com
Status: missing-partition-for-run-setup
- In each domain you want to filter, create an empty OU.
- Configure OU filtering for each domain you want to filter to include only that empty OU.
Actually, there's an easier way. With the MIISClient, open up the "Configure Run Profiles" Of the AD Connector. Then, just remove the Domain's you do not want to Sync against.
ReplyDeleteFor some reason, even if you un-select the domain from the Properties page, it does not clear it out of the Run Profile.