A Dynamic Group's membership is incorrect. Upon executing a rebuild of the group, the following error is observed in both the Active Roles Event Viewer as well as Verbose Logging:
Membership list of Dynamic Group is not updated until after the issue is resolved, so membership list may be incompliant with membership rules. Try forcing update of Dynamic Group from the Members tab in the Properties dialog box for Dynamic Group, in the ActiveRoles console.
Native Active Directory limitations.
CAUSE 2
RESOLUTION 1
To confirm this issue:
On the Active Directory Domain Controllers, an event similar to the following will show in the Directory Service logs:
There are two options to potentially resolve the issue.
RESOLUTION 2
To confirm this issue:
On the Active Directory Domain Controllers, one or more of the following events will show in the Directory Service logs:
Active Directory Domain Services could not update the following object in the local Active Directory Domain Services database with changes received from the following source directory service. Active Directory Domain Services does not have enough database version store to apply the changes.
Internal Error: Active Directory Domain Services could not perform an operation because the database has run out of version storage.
The version store for this instance (0) has reached its maximum size of
The possible values for this registry key are 6400 (the default), 9600, 12800, 16000, and 19200. Step through these values one-at-a-time until the issue is resolved. The Active Directory Domain Services service on the target Domain Controller must be restarted in order for this change to take effect.
STATUS
Enhancement Request 90882 has been created to change existing Dynamic Group functionality into Active Roles. Product Management will evaluate the request and this feature may become available in a future release of the product. There are no guarantees that this specific enhancement request will be implemented in a future release. For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー