This was an interesting one that came up a couple of days ago. Simple, but hope it stops someone pulling their hair out.
EV Provisioning Groups allow you to input a LDAP Query to target users using any AD attribute or a combination of attributes - very flexible solution.
So for example, you setup a 0 day Age based Mailbox policy and you want to target Temp Employees only. You have the AD attribute employeeType populated with 'Temp' for these specific users.
When you add the LDAP query 'employeeType=Temp' - EV will respond back with "The Query did not return any results". Hang on, this query works fine in AD User and Computers and other LDAP query tools, why doesn't EV see it? It is because EV queries a Global Catalog server for this information and by default the employeeType attribute is not replicated from the AD to the GC. The EV tasks also query GC's for information, so this is why Provisioning Group target setup is done the same way.
So how to get this replicated?
Follow this MS Article technet2.microsoft.com/windowsserver/en/library/42ae2845-a7aa-4f02-8944-175f6541125f1033.mspx and select the employeeType attribute. Wait a few minutes - usually between 15-30 minutes, maybe longer for larger environments.
