LDAP filter for users, groups, and email

In the Directory Synchronization Client, there are 3 synchronization types (groups, users, and email), each with its own LDAP search set up. The searches are independent of one another to give you flexibility in selecting the appropriate data.

For example, you can use the LDAP group attribute to select the users you want, even if you choose not to synchronize the group itself.

This is an example Active Directory schema:

Below are some examples of the synchronization choices you might make based on this schema.