Best Practice to Import Users from AD into ServiceNow

[Chong1]

Hi there,

I am new to ServiceNow, in my environment have 3000 users+ , 500 services accounts created at Users OU, what is the Best Practice to Import Users from AD into ServiceNow ?

Create a security group "ServiceNowUserGroup" in AD, add those 3000 users into this "ServiceNowUserGroup" and import it into ServiceNow or direct link ServiceNow point to Users OU ?

Thanks in advanced !

[Carlos Petrucio]

Is there any identifying data in the ad to specify that they are service accounts?

If I understand correctly, you don't want them to be imported correctly?
During the import you should ignore using a filter during the import.

[Carlos Petrucio]

Is there any identifying data in the ad to specify that they are service accounts?

If I understand correctly, you don't want them to be imported correctly?
During the import you should ignore using a filter during the import.

The article below can help you:

https://docs.servicenow.com/bundle/paris-servicenow-platform/page/product/orchestration/concept/c_OrchExmplActiveDirUserMgmt.html

[MarkWe]

Like Carlos says, this depends on the user properties that can signify a Service Account. This is different for every organisation.

This usually is something the engineer responsible for Active Directory can help you with.

ServiceNow accepts so called 'ldap filters' which are queries to limit the results returned by your AD.

If your AD-engineer isn't able to help you, maybe this helps:

• Maybe your service accounts always start with the same characters, for example SA_?
• Maybe your SA-accounts don't have a mail address associated with them?
• Maybe another property is always filled (or always empty) with SA-accounts?

* please note that some LDAP-queries, especially the ones that include a wildcard-character such as '*' can be pretty intensive for the AD-server. So please do work with your AD-engineer in finding a suitable filter-query.