AD LDS Accounts rule

Limit the scope to container

This setting defines the search query scope.

To improve query performance, limit the scope to a specific container.

Query criteria

Query criteria are sent with the query and may improve query performance.

Other Query Settings

Object class for user accounts

Specify object class for AD LDS accounts. 

Properties to display

To display additional properties for each object found by the query, add those properties to the list.

System properties

List of properties required to this rule to be executed correctly.

Filter

To hide unwanted data set the filtering conditions here.

Example: filter by the found object Distinguished Name.

Sort by

Sort result object list.

Initialization script

Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule.

Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where initialization script can help. You can initialize a global variable in this setting and then use it in query criteria.

Example: Get AD LDS accounts, created in the last ten days.

1. Add this initialization script:

{$global:DatePeriod = (Get-Date).AddDays(-10)}

2. Use $DatePeriod variable in query criteria builder:

Connection Settings

AD LDS server connection credentials

The default settings are specified in AD LDS extension settings.

AD LDS server name

AD LDS server port