Users Missing from Dynamic Groups and Managed Units (40873)

There is an existing group in Active Directory with existing members. This group is converted to a Dynamic Group with the include group membership option, but some or all previous members do not appear.

Alternatively, a new or existing Dynamic Group may not display some members which are expected.

Cause 1

Expected membership could be blocked due to a setting within the Built-in Policy - Dynamic Groups policy.

Cause 2

One or more of the expected members were Deprovisioned and the Undo-Deprovisioning action was not properly performed.

Resolution 1

1. In the Active Roles Console, expand Configuration | Policies | Administration | Builtin. Double-click on Built-in Policy - Dynamic Groups, then on the Policies tab click View/Edit for Provides support for groups with rules-based membership lists.
2. On the Policy Settings tab, de-select the checkbox titled Include only mail-enabled users in dynamic distribution groups
3. Click OK twice to save the change and close the policy.
4. Once this option has been changed, it will be necessary to run Check Policy.

Resolution 2

Right-click on the User object and check to see if it shows an action to Deprovision or Undo-Deprovision. If it shows the Undo-Deprovision action, then this User object was previously Deprovisioned and this status was not correctly rolled back using the Undo-Deprovisioning action.

Complete the Undo-Deprovisioning process in order to correct this partial status.