In modern versions of Active Roles, Dynamic Groups should never be emptied during a rebuild. Instead, they should perform Delta operations to get the expected group membership.
However, in some circumstances (specifically where communication with the target Active Directory Domain Controller is interrupted during a rebuild or an unexpected response is received from an Active Directory Domain Controller), a Dynamic Group is emptied and is not properly repopulated.
原因
This issue is being tracked as Defect ID 414916.
解决办法
WORKAROUND
Rebuild the problem Dynamic Group.
STATUS
Waiting for fix in a future release of Active Roles.