| Option | Description |
| Containers | Containers for the Active Directory domain are listed in a filter. When you use a container filter, all users and groups in the container are retrieved, but users and groups from subcontainers are not retrieved. |
| Search base alone | By default, the search base is the entire Active Directory domain. The Search base is used with the All users, All groups, and All users and groups filters. It retrieves all users and groups, including those in subcontainers. |
| Search base with LDAP custom filter | LDAP filter syntax is Internet RFC. You can find examples of LDAP filters in the Microsoft Active Directory documentation. The following example retrieves all users and groups whose names start with "a" and who belong to the Sales department:
"&(cn=a*)(department=sales)" |