This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ADSAccountInADSGroup inconsistency

Hi All

We know some ADAccounts are not in some ADSGroups but anyway the flag xmarkedfordeletion is =0.

Groups are inherited from business roles and XOrigin attributes shows that (2, or 3 depends on case, inherited anyway).

We've launched many times initial sync projects but still not marking those objects as outstanding. We need that because we need to publish again tr all those inherited groups as customer had a problem with AD

Any ideas?

Regards Leticia

0 Markus Weiss-Ehlers over 6 years ago

Are the group memberships marked with XIsInEffect = 1?
Cancel
Up 0 Down

Cancel
0 lerodriguezdiez over 6 years ago

Yes
Cancel
Up 0 Down

Cancel
0 Markus Weiss-Ehlers over 6 years ago

I assume your sync project is configured to use revision optimization. Did you tried to either start a Full Sync without revision optimization or to delete the revision information in the Synchronization Editor before you triggered another sync from Active Directory?
Cancel
Up 0 Down

Cancel
0 lerodriguezdiez over 6 years ago

Hi

Thank you first for your support. Finally, the problem was that customer gave us a wrong extraction from AD so the user really had those groups.

Regards

Leticia
Cancel
Up 0 Down

Cancel
0 lerodriguezdiez over 6 years ago

Anyway, this solution could also solve problems like duplicates in ADSAccount with the same objectGUID or SID that are not markedfordeletion?
Cancel
Up 0 Down

Cancel

Endpoint Privilege Management

ADSAccountInADSGroup inconsistency