Return
-
Title
Domain connectivity issue causing Dynamic Group to completely empty and then repopulate -
Description
Following the execution of the Dynamic Group Updater scheduled task, one or more Dynamic Groups have their membership cleared and then repopulated.
Prior to the Dynamic Group membership being cleared, the following event is noted in the Active Roles Admin Service Event Viewer Logs:
Log Name: ARAdminService
Source: ARAdminSvc
Date: 6/26/2024 3:00:34 AM
Event ID: 2000
Task Category: Policy
Level: Error
Keywords: Classic
User: S-1-5-21-00000000-0000000000-0000000000-000000
Computer: ActiveRoles.domain.local
Description:
Post-processing operation on object caused a policy violation.
Policy: DynamicGroup
Object: CN=DynamicGroup,OU=Container,DC=domain,DC=local
Details: Administrative Policy returned an error. Administration Service encountered an error when searching the container object 'DC=domain,DC=local'. -
Cause
This issue is being tracked as Defect ID 462022. -
Resolution
WORKAROUND
Change the schedule for the Dynamic Group Updater scheduled task to avoid any scheduled maintenance or backups being performed in Active Directory.
This Active Roles scheduled task can be found here:
Configuration/Server Configuration/Scheduled Tasks/Builtin/Dynamic Group Updater
STATUS
Waiting for fix in a future release of Active Roles. -
Change Request
462022