How to configure Active Directory Dynamic Group to find all employees who report to the manager

Summary: This article contains step-by-step instructions on how to configure Active Directory Dynamic Group to find all employees who report to the manager. 

Applies to: Cayosoft Administrator 7.30. or later

ID: KB20201116-1

---

Configuration

1. Create Active Directory Dynamic Group.
2. In AD Users membership rule open More Parameters section.
3. Set this LDAP filter: "(&(manager:1.2.840.113556.1.4.1941:=<Distinguished Name of level 1 manager>)(name=<Search string>))".

   For example: "(&(manager:1.2.840.113556.1.4.1941:=CN=John Smith,OU=Marketing,DC=domain,DC=com)(company=Demo*))"

   CN=John Smith,OU=Marketing,DC=domain,DC=com - is a first-level manager DistinguishedName 

   company=Demo* - is a search string to find all employees whose company name starts with Demo.

4. Save changes.

For LDAP syntax, please see this Microsoft article: https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx