When attempting to modify the Membership Rules of a Managed Unit or Dynamic Group, the following error is observed:
The string '...' is not a valid expression.
Active Roles performs an LDAP filter syntax check when attempting to modify an LDAP filter. The LDAP filter used by Active Roles incorrectly identifies the syntax as invalid.
This issue has been identified as a Product Defect and assigned the Defect ID 142240.
1. Create and configure the following Windows Registry DWORD to disable the LDAP syntax filter
Waiting for fix in a future release of Active Roles.