Hello, Having an issue where we're not getting all group memberships merged to a target account, if those groups are in a different domain within the same target forest. Target domain is a member of a multi-domain forest Forefront Identity Manager (FIM) has created contact objects in target domain, corresponding to users in source domain Contact objects may be members of Distribution Lists (DLs) in a number of domains in the target forest, not necessarily only ones in the target domain Using Directory Sync to merge target user (created via migration session) with target contact DLs that are in the target domain are merged just fine and show up on the target user, but DLs that reside in other domains of the target forest are lost Any ideas of how to get around this? Is there a way to set DirSync up for multiple target domains, or perhaps the entire target forest, so it will be aware of these other groups? Thanks! Justin

Hi Justin, From a technical support standpoint the DSA is only going sync with the domain pair that it's configured for. Was this requirement raised with the Quest Partner or Professional Services Consultant who helped scope and setup the project?

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DirSync merging with contacts is not copying all group memberships

justin.chapman over 6 years ago

Hello,

Having an issue where we're not getting all group memberships merged to a target account, if those groups are in a different domain within the same target forest.

Target domain is a member of a multi-domain forest
Forefront Identity Manager (FIM) has created contact objects in target domain, corresponding to users in source domain
Contact objects may be members of Distribution Lists (DLs) in a number of domains in the target forest, not necessarily only ones in the target domain
Using Directory Sync to merge target user (created via migration session) with target contact
DLs that are in the target domain are merged just fine and show up on the target user, but DLs that reside in other domains of the target forest are lost

Any ideas of how to get around this? Is there a way to set DirSync up for multiple target domains, or perhaps the entire target forest, so it will be aware of these other groups?

Thanks!

Justin