Scanning AD doesn't collect all users

[Juha_Otava]

Hello,

scanning AD goes mostly ok, but there is a small number of users left out.

For users schema is something like:

OU=XYZ Users,DC=XYZ,DC=local
OU=Company A,OU=XYZ Users,DC=XYZ,DC=local
OU=Temp,OU=Company A,XYZ Users,DC=XYZ,DC=local
OU=Company B,OU=XYZ Users,DC=XYZ,DC=local
OU=Temp,OU=Company B,XYZ Users,DC=XYZ,DC=local

OU=Other users,DC=XYZ,DC=local
OU=Users,DC=XYZ,DC=local

In Lansweeper Scanning Targets I have set filter:

CN=XYZ Users,DC=XYZ,DC=local

What I get is

Everything from:
OU=Other users,DC=XYZ,DC=local
OU=Users,DC=XYZ,DC=local

Most (95% ->) of the:
OU=XYZ Users,DC=XYZ,DC=local
OU=Company A,OU=XYZ Users,DC=XYZ,DC=local
OU=Company B,OU=XYZ Users,DC=XYZ,DC=local

I can't understand why some of the Company A and Company B users are left out. I've compared their AD attributes with succesfully reported persons, saw nothing wrong there. Some of them are in sub Temp for both companies, some in company main OU. Some use Macs, some don't.

Initially I suspected users not reported haven't logged to domain using PC, but that is not the case.

[Juha_Otava · Accepted solution]

I added Active Directory Preferred Domain Controller in Lansweeper Scanning targets preferences and got expected results. After some tests I found there is a sync problem between domain controllers.