You want to exclude specific accounts from your AD Logins job (user data source)

Products

• Data Loss Prevention
• Data Loss Prevention Core Package
• Data Loss Prevention Enforce

Issue/Introduction

You configured AD Logins Source job to import accounts to your Enforce console, but you want to exclude from importing specific accounts by their usernames.

Environment

16.X

25.1

Resolution

When you are configuring a user data source job, you can specify an optional filter under Advanced Options > AD Custom Filter to include/exclude imported entries based on AD/LDAP attributes (see Adding an Active Directory user data source (broadcom.com)). To exclude specific accounts by their AD name, you can use the below example:

(&(!(|((sAMAccountName=1STACCOUNTNAME)(sAMAccountName=2NDACCOUNTNAME)))))

where you need to replace 1STACCOUNTNAME and 2NDACCOUNTNAME with sAMAccountNames which you want to exclude.