If you do a Get-QADGroup/Get-QADUser "something*" -searchroot "somewhere" , and that something* only has one match, the -searchroot is ignored and you get a hit with the "something" even if the something is located outside the searchroot. It should not find the object outside the searchroot:
Use filter -Anr with the Get-QADGroup/Get-QADUser cmdlet, then the cmdlet will return proper result:
Defect request #126343 has been raised to fix this issue in a future version of Active Roles.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center