Dynamic Groups made using LDAP_MATCHING_RULE_IN_CHAIN do not update without a rebuild (239069)

In environments where a fix for Defect ID 664258 is present and has been activated with the BypassValidationForMatchingRuleOID registry entry, it is possible to create a Dynamic Group which contains the LDAP_MATCHING_RULE_IN_CHAIN OID, which looks like the following:

1.2.840.113556.1.4.1941

However, these Dynamic Group only update when a Rebuild is performed. They do not update dynamically.

WORKAROUND

1. Download the attached PowerShell script and import it into the Active Roles Console as a Scheduled Task Script Module under Configuration/Script Modules
2. Create a new Scheduled Task under Configuration/Server Configuration/Scheduled Tasks which is set to execute this script module hourly.

STATUS

Waiting for fix in a future release of Active Roles.