add-member object picker

Question

Hi all 
 i use an ARS web site to allow admin to manage groups' membership. 
 When you click Add members, you have an object picker windows from where you have to choose users to add. 
 I would like to restrict the objects list for objects which match with this filter: 
 "(|(&(objectclass=contact)(!name=john*))(&(msExchRecipientTypeDetails=*)(objectclass=user)(admindescription=xxx)))" 
 I have tried to adapt the KB 263705 and modify this line <Setting Name="Filters" Value="(objectClass=*)" /> with the filter i want. 
 The result in not good. 
 Do you know where i have to set this filter in order to limit the add members possible objects? 
 thanks for your help

Terrance.Crombie · Answer

I used Workaround 1 from KB 263705 and entered your LDAP filter into "LDAP search filter" field of the search picker, and it worked fine. Try that, rather than editing the raw XML. 
 EDIT: Sorry, I missed the fact that you were working with the "Add Members" command. 
 This search picker is not exposed in the Web Interface and it cannot be modified in the same fashion. 
 I'll look for another option and update this thread if I find anything.

Terrance.Crombie · Answer

Using Developer Tools in Internet Explorer, I can see that the "Members" command is using the "ObjectMembers" object picker. 
 This object picker does not have a "Filters" section in the configuration XML. I added one as a test, and it is not respected. Also, the Web Interface complained of a malformed configuration. So, it appears that there is no way to shape what this particular object picker sees. 
 The "Members" command type in the Active Roles Web Interface shows that it is a custom command which is probably why we can't shape its object picker. 
 I customized the Group form and added a new tab called Members. Then, I added the "member" attribute, and customized its object picker with your LDAP filter during the addition of the attribute to the form. This worked. 
 It's a little different, because it's a change to the default UI. You will have to remove or hide the built-in "Members" command, but this is the only way that I found to shape that object picker.

Endpoint Privilege Management

add-member object picker