Overview#A NOT search filter is a type of LDAP Search Filter that is intended to serve as a container that holds exactly one embedded search filter. The NOT SearchFilter is essentially an inverse operation, and in order for an entry to match a NOT SearchFilter, it must not match the embedded filter.
NOT SearchFilter may be represented as a string by enclosing the entire filter in parentheses and placing an exclamation point just after the opening parentheses.
For example, a filter of "(!(objectClass=person))" will only match an entry if it does not have an objectClass value of "person".