Connection filter data types and operators (SharePoint Server 2010)
Applies to: SharePoint Server 2010
When you synchronize profile information with a directory service in Microsoft SharePoint Server 2010, you can provide a filter that identifies the users or groups to exclude from synchronization. A filter consists of a set of clauses in the format <attribute> <operator> <value>, and the way to join the clauses. The data type of the attribute determines which operators are available. For more information about filters and how to create them, see Plan for profile synchronization (SharePoint Server 2010).
The following table identifies the operators that are available for each Active Directory Domain Services (AD DS) data type.
| AD DS data type | Operators |
|---|---|
Boolean |
is present, is not present, true, false |
Case insensitive string |
is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain |
Distinguished name |
is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain |
IA5-String |
is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain |
Integer |
is present, is not present, equals, does not equal, less than, less than or equal, greater than, greater than or equal, bit on equals, bit off equals |
Large integer or interval |
is present, is not present |
Numerical string |
is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain |
Octet string |
is present, is not present Note The AD DS attribute unicodePwd is an octet string, but SharePoint Server treats it as a Unicode string for the purpose of profile synchronization. |
SID |
is present, is not present |
Unicode string |
is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain |
UTC coded time |
is present, is not present, equals, does not equal, starts with, does not start with, ends with, does not end with, contains, does not contain |
Note
The bit on equals operator checks whether specific bits are turned on. For example, the clause "userAccountControl bit on equals 2" is true if the second bit of the userAccountControl attribute is a one. Similarly, the bit off equals operator checks whether specific bits are turned off (zero). The value that you provide for the bit comparison operators is the decimal equivalent of the bitmask you want to compare with. If, for example, you want to check the fifth bit (0000 0000 0001 0000), you would use the value 16.