• State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 95 subscribers
  • Views 4947 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ADS Group Synchronization

jllmasmitja
over 8 years ago

Hi,

We have an ADS Group with approx. 1500 user accounts.

When we launch an Initial Synchronization, the group is populated with only 8 accounts although all the user accounts has been imported correctly.

In addition this initial synchronization and the provisiong to this group are very slow (1 hour).

We have activated verbose logs for the Synchronization Editior and the Job Service but the aren't any errors.

Any idea? The 1IM version is 7.0.1.

 

Best regards,

Josep.

  • 0 over 8 years ago
    Hi Josep,

    Are all the 1500 group members in the domain you have sync'd? Can you verify that all 1500 accounts have an entry in the ADSAccount table?

    I suspect that these my be cross-domain memberships that you haven't yet sync'd.

    HTH, Barry.
  • 0 over 8 years ago
    No. I have verified that there are group members that have their corresponding entry in the ADSAccount table.
  • 0 over 8 years ago
    ,

    Josep and I are working on the same project. There are no cross-domain memberships.

    We've been able to drastically cut down group membership provisioning times by activating "serverbind" in the AD connection object. And by that I mean that , with this setting , times drop from 1 hour (off) down to no more than a minute (on).

    The targeted domain is made up of three servers. We've checked this article linked in the documentation and , as suggested , if one controller is selected for the configuration object, serverbind should also be set in order to reduce network traffic.

    msdn.microsoft.com/.../system.directoryservices.authenticationtypes(v=vs.110).aspx

    Whether this is a problem of the AD connector or it is related to our AD infrastructure remains yet unknown :) All in all, more than 1 hour to add one member to a group is still quite a lot of time, regardless of the serverbind flag status.

    Regards.