Export (0) Print
Expand All

Connection filter data types and operators in SharePoint Server 2013

Published: October 16, 2012

Summary: Learn about connection filter data types and operators for the User Profile service application in SharePoint Server 2013.

Applies to:  SharePoint Server 2013 Standard | SharePoint Server 2013 Enterprise 

When you synchronize profile information with a directory service in SharePoint Server 2013, you can provide a filter that identifies the users or groups to exclude from synchronization. A filter consists of a set of clauses in the format <attribute><operator><value>, and the way to join the clauses. The data type of the attribute determines which operators are available. For more information about filters and how to create them, see Plan profile synchronization for SharePoint Server 2013.

The following table identifies the operators that are available for each Active Directory Domain Services (AD DS) data type.

AD DS data type Operators

Boolean

is present, is not present, true, false

Case insensitive string

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

Distinguished name

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

IA5-String

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

Integer

is present, is not present, equals, does not equal, less than, less than or equal, greater than, greater than or equal, bit on equals, bit off equals

Large integer or interval

is present, is not present

Numerical string

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

Octet string

is present, is not present

The AD DS attribute unicodePwd is an octet string, but SharePoint Server treats it as a Unicode string for the purpose of profile synchronization.

SID

is present, is not present

Unicode string

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

UTC coded time

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

The bit on equals operator checks whether specific bits are turned on. For example, the clause "userAccountControl bit on equals 2" is true if the second bit of the userAccountControl attribute is a one. Similarly, the bit off equals operator checks whether specific bits are turned off (zero). The value that you provide for the bit comparison operators is the decimal equivalent of the bitmask you want to compare with. If, for example, you want to check the fifth bit (0000 0000 0001 0000), you would use the value 16.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft