On Demand Migration for Active Directory - Group memberships not migrating

Hello derrick fernandez ,

Typically, it is best to sync the users first, so that there are objects in our back-end database to add to the groups. However, syncing groups first will not be a problem, it just means you will need to sync the users twice, then run the group sync again for the groups to be populated. The first user sync will create the users, then you would need to run the user sync again, so that we "read-in" the new users we created on the first user sync. Then you can sync the groups again and get the membership populated.

Regards,

Trevor Taegder
Senior Technical Support Engineer
Quest | Support

The Staging OU (where the new objects were created) isn't part of the Target OU environment to read-in. Is this required now for the "read-in?"

Hello derrick fernandez ,

Yes, the newly created target objects would need to be "in scope" of the target environment in order to be "read-in" and included in the evaluation for group membership sync.

Regards,

Trevor Taegder
Senior Technical Support Engineer
Quest | Support

Should I be running a "reconcile on next read" on subsequent "read-ins?" I have yet to find a good definition on this particular setting, and what it actually accomplishes.

Reconcile on Next Read is for one-off troubleshooting, and the Reconcile on a schedule should be run at least a few times per week. Here is a KB article explaining this feature: https://support.quest.com/kb/4350584/dirsync-can-you-explain-the-reconcile-option-in-the-ad-directory-synchronization-environments-settings-4350584