diff --git a/ad-auth/templates/sssd.conf.j2 b/ad-auth/templates/sssd.conf.j2
index fd2dac80be456f4edd304fbc27ddb45fd1f5a740..32aca38e20fb6d5a8f55aa4a39dad3f000458063 100644
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -26,3 +26,5 @@ krb5_lifetime = 48h
 krb5_renewable_lifetime = 200h
 krb5_renew_interval = 30m
 ad_gpo_access_control = disabled
+ldap_search_base = dc=fsmpi,dc=rwth-aachen,dc=de?subtree?(&(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
+