We've updated the ServiceNow Community Code of Conduct, adding guidelines around AI usage, professionalism, and content violations. Read more

Importing Active Directory Distribution Groups via LDAP Feed

kevinthury
Tera Guru

We use an LDAP Import to bring in groups from Active Directory into the sys_user_group table in ServiceNow.  The filter on the OU Definition start with "(&(objectClass=group)(|(sAMAccountName=..." followed by a lengthy list of group names.  This is working fine, but all the groups noted in the filter are Security type groups.  We have been asked to bring in Distribution type groups as well, but are not having success.  We tried a number of filters including:

  • (&(objectCategory=group)(objectClass=group)(|(groupType:1.2.840.113556.1.4.803:=2)(groupType:1.2.840.113556.1.4.803:=4))
  • (&(objectClass=group)(|(groupType:1.2.840.113556.1.4.803:=2)(groupType:1.2.840.113556.1.4.803:=4))
  • (&(objectCategory=group)(groupType=2)

Many other variations were tried, yet I have never been able to properly browse to the groups iusing the Browse related link nor is the Distribution Group properly imported.

 

Have any of your successfully imported Distribution Groups from Active Directory and could you share the filter you use in the OU Definition.

1 REPLY 1

VishalC3
Tera Expert

HI @kevinthury 

 

We are using below filter to get all the groups including Distribution groups.

 

(objectclass=group)

 

Alternatively you can leave filter blank and click on browse button (See screenshot attached) to filter groups visually.

 

Thanks,

Vishal