Using AD account status in a campaign filter

[tonyperk (Tony Perkins)]

I have been looking at creating an uncorrelated campaign for Active Directory, that filters out disabled AD accounts. The issue I am running into is that the Active Directory source doesn’t appear to pass along an account attribute for account status. Since it’s an uncorrelated campaign, I’m limited to only using a campaign filter (right?).

The filter doesn’t allow for the overall IDN calculated "enabled/disabled’ status of the account to be accessed.
The filter doesn’t appear to work with multi-value attributes, which could allow for attribute accountFlags to be used (It displays as strings like “User Account is Disabled”)
There is an AD attribute for accountDisabled, however no value is brought in from AD.

I hope I’m missing something here as this would be a pretty big gap. Thanks!

[jesvin90 (Jesvin Joseph)]

Hi @tonyperk,

Have you considered using the userAccountControl attribute in the filter.?

[ManvithaNalabolu06 (Manvitha Nalabolu)]

Try using userAccountControl values aren’t being brought in, check your account schema and aggregation configuration in the AD source — you may need to explicitly include or map those attributes.

[tonyperk (Tony Perkins)]

I see that userAccountControl wasn’t part of the default schema. That should do the trick to add it and use it with contains as shown above. Thank you!