Share via


Connection filter data types and operators (SharePoint Server 2010)

 

Applies to: SharePoint Server 2010

When you synchronize profile information with a directory service in Microsoft SharePoint Server 2010, you can provide a filter that identifies the users or groups to exclude from synchronization. A filter consists of a set of clauses in the format <attribute> <operator> <value>, and the way to join the clauses. The data type of the attribute determines which operators are available. For more information about filters and how to create them, see Plan for profile synchronization (SharePoint Server 2010).

The following table identifies the operators that are available for each Active Directory Domain Services (AD DS) data type.

AD DS data type Operators

Boolean

is present, is not present, true, false

Case insensitive string

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

Distinguished name

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

IA5-String

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

Integer

is present, is not present, equals, does not equal, less than, less than or equal, greater than, greater than or equal, bit on equals, bit off equals

Large integer or interval

is present, is not present

Numerical string

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

Octet string

is present, is not present

Note

The AD DS attribute unicodePwd is an octet string, but SharePoint Server treats it as a Unicode string for the purpose of profile synchronization.

SID

is present, is not present

Unicode string

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

UTC coded time

is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain

Note

The bit on equals operator checks whether specific bits are turned on. For example, the clause "userAccountControl bit on equals 2" is true if the second bit of the userAccountControl attribute is a one. Similarly, the bit off equals operator checks whether specific bits are turned off (zero). The value that you provide for the bit comparison operators is the decimal equivalent of the bitmask you want to compare with. If, for example, you want to check the fifth bit (0000 0000 0001 0000), you would use the value 16.

See Also

Concepts

Plan for profile synchronization (SharePoint Server 2010)