User has ADS groups ADSAccountInADSGroup table but xIsInEffect=0
说明
In the table ADSAccountInADSGroup a user is assigned a number of groups, but they all have xIsInEffect=0 and none of the groups are visible in front-end tools like Manager. What would explain this behaviour?
原因
The user has been flagged as a security risk.
解决办法
If a user has been flagged as a security risk, any associated accounts will be removed.
This behaviour can be customized in the account definition by modifying the setting "Retain account definition on security risk".