Video Screencast Help

How to create a Filter Based on Active Directory OU?

Created: 07 Dec 2012 • Updated: 11 Dec 2012 | 6 comments
This issue has been solved. See solution.

Manage --> Filters.

I need to crate a filter that will see all servers in an OU.

How do I do this?

Comments 6 CommentsJump to latest comment

Ludovic Ferre's picture

Create a new filter and then on inclusion / exclusion selector you should be presented with 3 options: Filter / Computers and OU if I remember correctly.

It's on the filter definition page, you know, where we normally force you guys to "Exclude computers not in" when you simply want to include computers ;).

Ludovic FERRÉ
Principal Remote Product Specialist

Robert Steinle's picture


The easiest way is to enable “Create organizational unit filters” in AD Import rule.

If this option is enabled, then filters will be created automatically.

NOTE: This could significantly slow down AD Import, depending on your structure.


Robert Steinle

Symantec Corporation

For Forum threads, please click "Mark as Solution" if answered.

Ludovic Ferre's picture

Nice one, I should have refreshed the window before posting my screen shot :D.

Ludovic FERRÉ
Principal Remote Product Specialist

Ludovic Ferre's picture

Okay, I did well to check on my server, as my previous answer applies to targets in policies, not filters.

To an an OU into a filter you use the "Explicit Inclusions and Exclusions" section. Click on the selector (the link normally showinfg "0 resources found" on a new filter. It will open the selector window from which you have access to the Organizational Views and Group. Here's a scren shot:

Ludovic FERRÉ
Principal Remote Product Specialist

andykn101's picture

The automatically created filters have a raw SQL definition:

SELECT Guid FROM ItemResource r join dbo.[Inv_OU_Membership] t on t.[_ResourceGuid] = r.[Guid] AND t.[Distinguished Name] = N'OU=CONTACTS,OU=EXCHANGE,DC=FABRIKAM,DC=COM'

Authorised Symantec Consultant (ASC) with Endpoint Management Limited, an Authorised Symantec Delivery Provider based in the UK.

Connect Etiquette: Please "Mark as Solution" posts that fix your problem.

The_yeti's picture

Hey guys !  Thanks for all the responses.  I tested the the "Explicit Inclusions and Exclusions" and the "Raw SQL" method.  I created the filter and then I created a new computer object in the OU. 

The "Raw SQL" method updates and reflects the new computer, but the the "Explicit Inclusions and Exclusions" does not. 

I am great with using the RAW SQL method.  This is great, thanks Andykn101