Exclude OUs using LDAP Query

Hello ...

I need to import all ACTIVE users profiles in MOSS 2007 from AD using a LDAP
Query and I want to exclude 2 OUs ...which have Resouce Accounts.

I have been looking around and noticed that I cannot exclude OUs?????

Anybody done this successfully ....???

Advise Please.

Thank you

Right, LDAP does not support that. You must either choose the query scope to
include only the containers you want (which may be impossible given the
hierarchy) or you must filter based on an attribute value stored in the
individual object. If the accounts you want to exclude have non-expiring
passwords and the other accounts don't, then you could filter on that flag
in userAccountControl. Alternately, if all the description attributes of the
resource accounts said something like "resource account" then you could
filter on that.

You can do this by query scope by breaking the query into multiple queries.

Hope that makes sense.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
"WildPacket" <WildPacket@discussions.microsoft.com> wrote in message
news:53C1DB04-3CBF-40B3-8EEC-293C3A4CD593@microsoft.com...
> Hello ...
>
> I need to import all ACTIVE users profiles in MOSS 2007 from AD using a
> LDAP
> Query and I want to exclude 2 OUs ...which have Resouce Accounts.
>
> I have been looking around and noticed that I cannot exclude OUs?????
>
> Anybody done this successfully ....???
>
> Advise Please.
>
> Thank you