I'm working on configuring our new Web Help Desk server and I have created an LDAP query that does a great job bringing just the active users and ignoring service accounts and other "junk" users. That being said I haven't been able to figure out the correct syntax that Web Help Desk use which is the RFC 2254 standard. The LDAP Query has had specific removed and split over lines for readability but this query functions using PowerShell but it is not following RFC 2254 standards. I don't understand how the spaces and other special characters are escaped. The documentation is not clear to me.
(|(&(objectCategory=person)(objectClass=user)(memberOf=CN=All Company,OU=Common,DC=domain,DC=com)(!userAccountControl:1.2.840.113556.1.4.803:=2))
(&(objectCategory=person)(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=3PL-DC'S ALL,CN=Users,DC=Domain,DC=com)(!userAccountControl:1.2.840.113556.1.4.803:=2))
(&(objectCategory=person)(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=Group-Name Resources,OU=Groups,OU=Company,DC=domain,DC=com)(!userAccountControl:1.2.840.113556.1.4.803:=2)))