When more than one Active Roles configuration is managing the same domain, Group Families members are being purged and rebuilt every day (4339062)

If more than one Active Roles configuration is managing the same domain, Group family members are being removed by a dynamic group process if the cross domain membership is enabled for the dynamic group built-in policy.

This happens if the Active Roles configurations are version ActiveRoles Server 6.9 and Active Roles 7.x or if they are a mix of Active Roles 7.x. and/or Active Roles 8.x

STATUS

This is being tracked as Defect ID 668247 and is resolved by implementing a registry key on all Active Roles 7.x Active Roles Administration hosts.

1. After installation, open the Registry Editor by navigating to Start- >Run and typing regedit
2. Navigate to the registry key HKEY_LOCAL_ MACHINE\SOFTWARE\One Identity\Active Roles\7.x\Service
3. Create a new DWORD (32-bit) entry named RebuildDG_CoExist and set the value to 1
4. Setting this value to 0 or deleting the key disables the fix