On Tue, Jan 31, 2012 at 3:00 PM, Bala <oratips@xxxxxxxxx> wrote: > Gurus, > Any way to segregate vendors or external groups that when defined in Active > directory prevents an Oracle R12 EBS user account from getting created ? > > Thank you for any ideas > > Yes, I have done that. It was on Apps 11i, but that really doesn't matter. The key is to put employees and anyone else that should have an account created in Apps into a Group created for the purpose. If your company is Widgets Inc LLC then you might create a group WdgtIncEmp that only employees belong to. That group is used as part of a filter for the AD integration. It might look like this: ( ou=or in this case means OU of 'Oregon') searchfilter=(|(memberof=cn=WdgtIncEmp,ou=or,dc=widgetinc,dc=com)(isDeleted=TRUE)) Jared Still Certifiable Oracle DBA and Part Time Perl Evangelist Oracle Blog: http://jkstill.blogspot.com Home Page: http://jaredstill.com -- //www.freelists.org/webpage/oracle-l