PIM Manager settings · Settings > Hybrid AD & workloads
Server discovery: OUs to leave out
| Key | HybridAdServerExcludeOus |
|---|---|
| Where | Settings > Hybrid AD & workloads > Hybrid Active Directory (PIM for AD) |
| Type | List |
| Default | Blank (nothing left out) |
| Feature | PIM for on-premises Active Directory · Pro Business, Pro Enterprise, Pro MSP |
What it does
Organizational units whose servers the hybrid worker never lists. Enter distinguished names, one per line or separated by a semicolon; sub-OUs are included. It works with the whole domain and with the list of OUs to look in.
When set
When set: from the worker's next listing servers below these OUs are not listed, not proposed and not handled by server onboarding.
When blank or default
When blank / at the default: no OU is left out.
Risk and how to reverse it
A server in a left-out OU keeps the group and access it already has, but is no longer proposed or onboarded. Nothing is removed. Reversible: clear or edit the list.
Requires
Pro (On-premises Active Directory feature) and a running hybrid worker. SuperAdmin to change.
Recommended
Use it for OUs of test, retired or quarantined servers.
Related settings
- On-premises Active Directory (hybrid worker) FeatureGates.hybrid.ad
- AD OU (Day2Day Admins) NamingConventions.PathAdmins
- AD OU (High Priv Admins) NamingConventions.PathAdminsL0T0
- AD group marker HybridAdGroupMarker
- Pattern override HybridAdGroupPattern
- Cloud admin suffix HybridAdCloudSuffix
- AD admin suffix HybridAdAccountSuffix
- OU for new AD groups HybridAdGroupsOu
- Per-server group format HybridAdServerGroupFormat
- Shared server-admins group HybridAdServerAdminsGroup
- Never remove HybridAdProtectedMembers
- Groups per batch HybridAdSyncBatchSize
- Batches at once HybridAdSyncParallel
- Read activation end times as UTC HybridAdEndTimeAsUtc
- Server discovery: only these OUs HybridAdServerSearchOus
- Server discovery: last changed within (days) HybridAdServerActiveDays
- Server discovery: only names like HybridAdServerNameInclude
- Server discovery: never names like HybridAdServerNameExclude
- New servers in these OUs are offered for approval as one list HybridAdServerAutoGroupOus
- Server groups created per run HybridAdServerAutoGroupMaxPerRun
- Clean-up: also look for old PIM groups in these OUs HybridAdCleanupOus
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack