User filtering allows you to fine-tune the way Active Directory synchronization is performed.
Leaving all filters empty will cause MetaDefender Vault to license all the users inside your Active Directory. The only available administrator in this case will be the local administrator.
The following filtering options are available:
Include Organizational Units: any users or groups found in the included OUs will be licensed as users
Exclude Organizational Units: any users or groups found in the excluded OUs will be ignored when licensing users
Include Groups: any users or groups specified in the included groups will be licensed as users; please note that included groups will override excluded OUs
Exclude Groups: any users or groups specified in the excluded groups will be ignored when licensing users; please note that excluded groups will override included OUs
Administrator Groups: any users or groups specified in the list of administrator groups will be licensed as administrators
Note on Active Directory synchronization
Please note that filtering based on included/excluded OUs and included/excluded groups and administrator groups is recursive. This means that any groups or groups in groups found are traversed until the bottom of the hierarchy.
Note on Supervisors
The local administrator account is also a global supervisor. This ensures that you have one supervisor active at all times.