The original default AD User search filter in version 9.x and below was :-
samAccountName={EnrollmentUser}
However after upgrading to 18.11.0.11 we found that one customers ACC was not enumerating AD users, AD group search was working fine.
It turns out that VMWare have change the requirements for the user search filter and now must include (&(…))
Changed to the search string to:-
(&(objectCategory=person)(sAMAccountName={EnrollmentUser}))
And AD Users search worked again.
Cheers
Mike