ArError2526_1 " Active Roles is unable to apply a membership rule when updating the Dynamic Group." (4226680)

ArError2526_1 " Active Roles is unable to apply a membership rule when updating the Dynamic Group."

Active Roles is unable to update membership of a certain dynamic group due to a membership rule failure.

•  The Administration Service cannot find the search container of the membership rule (referred to as "membership rule scope" in the event description). The search container may be renamed or moved to a different directory location. A symptom of this condition is the "Directory object not found" error message in the "Details" field of the event description.

• The Administration Service cannot access an Active Directory domain that holds the objects that match the membership rule.

• The Administration Service cannot access the Active Roles configuration database on SQL Server.

• Review the "Membership rule scope" field in the event description to identify the Distinguished Name (DN) of the membership rule's search container. Ensure that the container with the specified DN exists in the directory. If the container was renamed or moved, reconfigure the membership rule to search in the correct container.
• Verify that the domain that holds the membership rule's search container has the "Available for management" status in the Active Roles console. If not, make sure that at least one domain controller for that domain can be contacted from the computer running the Administration Service.
• Look for event 2512 in the Active Roles event log to see if the Administration Service has lost connection to the database. For event 2512 troubleshooting instructions, see the ArError2512_1 Solution.
• Once you have performed the above checks, update the membership of the dynamic group by clicking "Rebuild" on the "Members" tab in the "Properties" dialog box for that group, in the Active Roles console. Alternatively, you might update the membership of all dynamic groups by using the Active Roles console to execute the "Dynamic Group Updater" task located in the "Configuration/Server Configuration/Scheduled Tasks/Builtin" container.

Example: Unable to apply a membership rule when updating the Dynamic Group. Membership rule execution failed. Details: Directory object not found Dynamic Group: dg (arsdev.msk.qsft/aol) Membership rule scope: 3b4e886e-ab57-41fb-ac15-b868f4dc243a Membership rule filter: Active Roles encountered an error when executing this membership rule, so the rule is not applied and the members list of this Dynamic Group does not comply with the membership rules. This issue may stop Active Roles from updating the members list of the Dynamic Group. Try to update the members list by clicking Rebuild on the Members tab in the Properties dialog box for this Dynamic Group in the Active Roles console. Check the membership rules listed on the Membership Rules tab in that dialog box.