Can we put a condition on ADS_ADSGroup_update so that it doesn't launch if there is no active AD account attached to the person.
We have a case where this Process is triggered on deactivated or deleted AD accounts and fails in Frozen state:
 Error resolving references of property (vrtMembersSID@ADSGroup) for system object (ad_group_xxx)!
 Object of type Active Directory user accounts does not exist in database or you do not have the relevant viewing permissions.
Is that possible?