This setting defines the scope of objects to include in the Admin Unit.

The scope for the default AD Users web query, that is included in the built-in Active Directory Admin Unit, is set to the default domain. Thus, default AD Users web query enumerates all objects in the default domain, including system and built-in Active Directory accounts.

The scope for the custom AD Users web query, that is included in the custom Admin Unit, is defined as the Admin Unit scope during Admin Unit creation.

Use Query criteria to filter out certain objects by its property values. Query criteria are sent with the query to the target system, so filtering is done by the target system before it returns the result set.

The default value for this setting is specified in the Web query default filter in the Active Directory extension settings, where it set to include all objects by default.

TIP: For different samples on the criteria builder, see How to use Query Builder dialog for Query Criteria and Filter rule settings.

Specify properties to display as columns in the web query result grid.

The default columns set for the web query is defined in Active Directory extension Customize columns section.

To display additional columns, add the required properties to the Properties to display list.

Advanced setting to define the list of properties required for this rule to be executed correctly.

Specify additional filter condition to hide unwanted data based on criteria, not supported by the Active Directory query.

For example, to filter out objects by the part of their Distinguished Name.

TIP: For optimal performance, use Query criteria above to filter objects whenever possible.