Objects not added or removed from Dynamic Groups when modified outside of Active Roles (4382521)

When objects are added to, or removed from a Dynamic Group outside of Active Roles, the objects are not added or removed as expected.

Scenario One:

• Object is added to a Group outside of Active Roles, such as from Active Directory Users and Computers
• The Object does not meet the criteria in the Membership Rules

Issue:

• The Dynamic Group does not remove the Object until either:
  • Rebuild is manually executed
    OR
  • Built-In Scheduled Task Dynamic Group Updater is executed

Scenario Two:

• Object meets the criteria in the Membership Rules and is a member of the Dynamic Group
• Object is removed from the Group outside of Active Roles, such as from Active Directory Users and Computers

Issue:

• The Dynamic Group does not automatically re-add the object until either:
  • Rebuild is manually executed
    OR
  • Built-In Scheduled Task Dynamic Group Updater is executed

In both scenarios, a restart of the Active Roles service does not update the Dynamic Group.

Defect 701782 

WORKAROUND

Click Rebuild on any known groups that have invalid membership.

NOTE: Manually executing the Scheduled Task Dynamic Group Updater will fix the groups, however it is not recommended to schedule or execute this task multiple times per day as it may impact performance. By default, this Scheduled Task runs at 3am local server time and will correct any Dynamic Group that has invalid membership.

STATUS

This issue has been logged as Defect 701782 and will be resolved in Active Roles v8.5.

Versions impacted

Active Roles 8.2.1 SP2 up to and including SP6.