A Dynamic Group's membership is incorrect. Upon executing a rebuild of the group, the following error is observed in both the Active Roles Event Viewer as well as Verbose Logging:
Membership list of Dynamic Group is not updated until after the issue is resolved, so membership list may be incompliant with membership rules. Try forcing update of Dynamic Group from the Members tab in the Properties dialog box for Dynamic Group, in the ActiveRoles console.
Native Active Directory limitations.
CAUSE 2
RESOLUTION 1
To confirm this issue:
On the Active Directory Domain Controllers, an event similar to the following will show in the Directory Service logs:
There are two options to potentially resolve the issue.
RESOLUTION 2
To confirm this issue:
On the Active Directory Domain Controllers, one or more of the following events will show in the Directory Service logs:
Active Directory Domain Services could not update the following object in the local Active Directory Domain Services database with changes received from the following source directory service. Active Directory Domain Services does not have enough database version store to apply the changes.
Internal Error: Active Directory Domain Services could not perform an operation because the database has run out of version storage.
The version store for this instance (0) has reached its maximum size of . It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.
The possible values for this registry key are 6400 (the default), 9600, 12800, 16000, and 19200. Step through these values one-at-a-time until the issue is resolved. The Active Directory Domain Services service on the target Domain Controller must be restarted in order for this change to take effect.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Termini di utilizzo Privacy Cookie Preference Center