LDAP query for chained direct reports won't save in Dynamic Groups. (215287)

Steps to Recreate:

1. Create a Dynamic Group
2. Custom search ---> Advance ---> enter the LDAP query 
3. Example: (&(objectClass=*)(manager:1.2.840.113556.1.4.1941:=CN=Tham Kam,OU=HR,DC=ThamuserDC1,DC=cork,DC=lab,DC=local)(!(ou=Hidden)))
4. Click on preview rule, it will display the result
5. Click on OK it will throw an error message

To enable this functionality, perform the following steps:

Note: Always save a backup of the registry prior to making any changes. In the event something else is changed a registry rollback can be done using a full backup.

1. Open the Registry Editor: On the machine where Active Roles Service is installed, click Start | Run | regedit
2. Navigate to the registry key HKEY_LOCAL_ MACHINE\SOFTWARE\One Identity\Active Roles
3. Right click and select New DWORD (32-bit) Value
4. Enter the registry key name as BypassValidationForMatchingRuleOID
5. Double click on the registry key name BypassValidationForMatchingRuleOID and in the Value Data field, set the registry key value to 1 and click OK
6. Setting this value to 0 or deleting the key disables the fix

* Please be aware that the above registry change will also need to be made on any remote machines where the MMC is installed.