How to configure Active Directory Dynamic Group to find all employees who report to the manager

Summary: This article contains step-by-step instructions on how to configure an Active Directory Dynamic Group to find all employees who report to the manager.

Applies to: Cayosoft Administrator 7.3.0 or later

Configuration

1. Create an Active Directory Dynamic Group. Learn more in: Creating Dynamic Groups.

2. In the AD Users membership rule, open the More Parameters section.

3. Set this LDAP filter:

   Copy

   "(&(manager:1.2.840.113556.1.4.1941:=<Distinguished Name of level 1 manager>)(name=<Search string>))"

   For example:

   "(&(manager:1.2.840.113556.1.4.1941:=CN=John Smith,OU=Marketing,DC=domain,DC=com)(company=Demo*))"

   where

   CN=John Smith,OU=Marketing,DC=domain,DC=com - is a first-level manager DistinguishedName

   and

   company=Demo* - is a search string to find all employees whose company name starts with Demo.

4. Save changes.

For LDAP syntax, please see this Microsoft article: Active Directory: LDAP Syntax Filters.