Ran in to a project today where I had to revisit the old LDAP query. Here are some useful links: LDAP Query Basics https://technet.microsoft.com/en-us/library/aa996205%28EXCHG.65%29.aspx · Doing a Search Using Active Directory Users and Computers Doing a Search Using LDP Doing a Search Using LDIFDE Using LDAP Queries in ADModify Search Filter Syntaxhttp://msdn2.microsoft.com/en-us/library/aa746475.aspx Famous LDAP Filters…
When you throw claims authentication in the mix of AD users and SharePoint user profiles there is some things you should be aware of: Use your Identity Provider to make the user profile sync connection to the domain There’s no built in mapping between the user profile identifier and claim (or forms) users identity provider;…
The User profile synchronization with AD comes with a build in property mapping. The following page from The TechNet Library describes the profile properties and link to their corresponding directory service attributes: Default user profile property mappings (SharePoint Server 2010) User profile property AD DS attribute SPS-DistinguishedName dn SID objectSid Manager manager PreferredName displayName FirstName…