We have technicians that have left the company. Their user was part of of the Global Operators Group. My ldap query for AD connector is:
(|(&(ObjectCategory=User)(!samaccountname=service_)(!samaccountname=-a)(!samaccountname=sa_)(!samaccountname=sql)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))(objectCategory=group))
In the global members property, in the included members area i have user department contains IT AND OU does not equal "Disabled Users" AND configuration object status equals active. However, the technicians who are no longer here still show as a selection for "assigned to".
I would really like old users hidden to prevent as a possible selection.
