Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have SharePoint 2010 set up to sync active directory users and it is working great. I am getting disabled users in the sync though. I have tried what all the blogs say, filter on

userAccountControl bit on equals 2

but to no avail, the disabled users are still syncing. I am at a loss on where to look next. My last resort would be to create a ou/folder in AD and move disabled users there and remove that from the sync connector, but I don't really want to go there.

Any ideas?

share|improve this question

Did you already try this?

I got a little confused by whether you should use ==2 or !=2....



Roger Williams Franklin Laboratory

share|improve this answer
up vote 0 down vote accepted

I've found that the filter works, but only before a user is imported and a profile created. If you do an import of all users, then put the filter up, it doesn't work. I had to remove the disabled users that were imported before I had a filter manually. Any users after that become disabled then seem to get removed.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.