A Unified CM custom LDAP filter can exclude disabled Active Directory accounts by negating a bitwise-AND test on userAccountControl, for example (&(objectclass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))).
inferred · Checked 2026-10-02
- Vendor
- Cisco
- Product
- Cisco Unified Communications Manager
- Subsystem
- LDAP filter
- Deployment
- on-premises
- Region
- not restricted
- Release range
- current as of 2026-10-02
- Status
- inferred
- Checked
- 2026-10-02
Sources
- UserAccountControl property flags - Windows Server — Microsoft · tier 2 current vendor documentation · List of property flags (ACCOUNTDISABLE) combined with Search Filter Syntax matching rule table
Cite this note
APA
WarmTransfer. (2026, October 2). Troubleshooting LDAP directory sync failures in Unified CM: source note cucm-ldap-sync-troubleshooting-filter-exclude-disabled. WarmTransfer. https://warmtransfer.net/knowledge/claims/cucm-ldap-sync-troubleshooting-filter-exclude-disabled
BibTeX
@misc{warmtransfer-claim-cucm-ldap-sync-troubleshooting-filter-exclude-disabled,
title = {Troubleshooting LDAP directory sync failures in Unified CM: source note cucm-ldap-sync-troubleshooting-filter-exclude-disabled},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/cucm-ldap-sync-troubleshooting-filter-exclude-disabled},
note = {Source note cucm-ldap-sync-troubleshooting-filter-exclude-disabled, checked 2026-10-02}
}