🗂️LDAP Filter Builder
Visually construct and test complex Active Directory queries using the standard LDAP Query Syntax (RFC 4515). Designed for Identity Management engineers to improve SysAdmin Productivity without memorizing complex logical operators.
Mastering LDAP Query Syntax for Active Directory
Crafting accurate LDAP queries is a critical skill for Systems Administrators, DevOps engineers, and IAM (Identity and Access Management) professionals. A poorly written filter can inadvertently lock out accounts or grant privileges to the wrong Active Directory groups.
SysAdmin Productivity Tip: This builder allows you to stack multiple conditions visually. It automatically handles the tricky parenthesis nesting for AND (&), OR (|), and NOT (!) operators. Use the "Manual / Preset" tab to quickly load common queries like identifying locked out accounts or filtering by specific OS versions.
Like all our tools, this is entirely client-side. Your directory structures, attribute names, and organizational data never leave your local browser.
Common LDAP Attributes:
- sAMAccountName - The user's login ID
- userPrincipalName - The user's email-style login
- memberOf - Group membership evaluation
- userAccountControl - Bitmask for account status (enabled/disabled)