Hi
You can do a couple of things here:
1) Point the Base OU at the root of the domain, and filter out what the CUPS LDAP service account can see by using AD permissions
or
2) Take a look at this post (and rate it) where Michael points out a method for configuring multiple base OUs per LDAP profile (https://supportforums.cisco.com/message/1201293#1201293)
Regards
Aaron
Please rate helpful posts...
Aaron
Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!