How to exclude specific AD OU from SharePoint 2013 people picker?

Madhu

Is there a way to exclude specific AD OU from SharePoint 2013 people picker?. The reason for this is to exclude Shared Mailbox accounts not to resolve in SharePoint people picker, so that can not add these to SP sites.

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Madhu6y ago
Hi Habibur,

I already tried those based on the experts exchange article, those not worked and the people picker still resolves the shared mailbox accounts. The second article that you mentioned was created by me and I have not get any solution over there also.

Any other thoughts here??
Habibur Rahaman6y ago
Use the below sample code:

$WebApp.PeoplePickerSettings.ActiveDirectoryCustomQuery = "(|(mail=*)(objectcategory=group))"

$WebApp.PeoplePickerSettings.ActiveDirectoryCustomQuery = "(|(mail=*)(objectcategory=group)(!(distinguishedName:=%Evil%))"

For details refer to the below thread:

https://www.experts-exchange.com/questions/29131121/Exclude-specific-AD-OU-from-Sharepoint-2016-People-Picker.html

https://social.technet.microsoft.com/Forums/en-US/c4e68b66-f747-4711-baaf-976f957161cc/how-to-exclude-specific-ad-ou-from-sharepoint-2013-people-picker?forum=sharepointgeneral
Madhu6y ago
Hi Sharath,

The query not worked, the mailbox accounts are still resolving in people picker. I have tried the following queries,
(&(objectCategory=person)(!(OU=Shared Mailbox,OU=Resources,OU=Exchange,OU=Global Systems,DC=domain,DC=company,DC=com)))
(!(OU=Shared Mailbox,OU=Resources,OU=Exchange,OU=Global Systems,DC=domain,DC=company,DC=com)))
(&(objectClass=User)(!(ou:dn:=Shared Mailbox))
(cn:componentFilterMatch:=item{component "*",rule rdnMatch, value "ou=Shared Mailbox"})
(|(mail=*)(objectcategory=CN=person)(!(distinguishedName:=%Shared Mailbox%)))
(|(mail=*)(objectcategory=CN=person)(!(OU:distinguishedName:=Shared Mailbox)))
Any other thoughts whould be much helpful.

Thanks
Sharath Kumar Aluri6y ago
Try with the below sample query. If your OU is Shared Mailbox and you want to avoid the specific one try with the below query.
$wa.PeoplePickerSettings.ActiveDirectoryCustomQuery = "(|(mail=*)(objectcategory=group)(!(distinguishedName:=%Shared Mailbox%))"
Thanks & Regards,