To check whether the domain account have permission to import all users from the selected OU

To check whether the domain account have permission to import all users from the selected OU

To install ldp.exe tool,

1. Open Server Manager tool in SDP installed server
   
2. Navigate to Roles configuration setting
   
3. Select the Add Roles link
   
4. Work through the Add Roles Wizard
   
5. Check the Active Directory Lightweight Directory Services. 
   

For more information on the use of the LDP.exe tool, refer below link:

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc771022(v=ws.11)

To check whether domain account have permission using the tool,

            1. Run ldp.exe tool. Install it in SDP installed server if not available

            2. Connect to the Domain Controller by choosing Connection -> Connect in the tool. Enter server name, port & click ok (Refer Image 1)

            3. Once completed, click Connection-> Bind & enter the username, password, domain (configuration from SDP Windows Domain Scan) & choose Bind with credentials as bind type (Refer Image 2)

            4. On successful connection you will see message like in Image 3

            5. Now in the top menu, choose Browse->Search, search wizard will appear,

                  a) In the Base DN enter the OU's distinguished name (eg. OU=Test,DC=EXAMPLE,DC=COM)

                  b) In the Filter, enter the below query as it is  (&(&(objectClass=user)(objectCategory=person)(!displayName=Internet Guest Account)(!sAMAccountName=IWAM_*)(!sAMAccountName=IUSR_*))(uSNChanged>=0))

                  c) Choose "One Level" as scope

                  d) In Attributes, enter 

                  objectClass;samAccountName

                  e) Now click Run, the results will be displayed in the console. Please check if all the user objects in the OU are returned.  

Image 1:

Image 2:

Image 3: