• State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 63 subscribers
  • Views 3210 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Improve Dynamic Group calulations

lrigs
over 6 years ago

Hello,

We just upgraded to 7.2 and seem to be having some dynamic group issues.

Object are not getting added to dynamic groups right away as they were in 6.9.

An object will get added instantly when you create the object in ARS but when created in AD directly it will not get added until the next Dynamic Group Updater job.

Is there a way for ARS to calculate the dynamic group conditions upon sync from AD direct?

In the mean time i changed the Dynamic Group Updater to run every 5 hours instead of once a day.

I'm sure this will put a strain on the server.

Thank you, Lu

  • 0 over 6 years ago
    I suggest following steps:
    1. ARS72 MMC | open AD\YouDynamicGRoup and see Tab shows which ARS Server controls the group
    1.1. note, there might be way1) Dynamic Group and way2) Group Membership AutoProvision Policy to accomplish the same membership logic upon User Provision
    2. (test2) Try to provision new AD user via legacy ARS69 to see will the same your Dynamic Group membership behavior
    3. (test3) in ARS 72 create similar test DG with the same rule as the legacy DG in the question.
  • 0 over 6 years ago
    Aidar,
    I appreciate the suggestions.
    It seems to be an issue with any Group that was migrated over from 6.9.

    This is not happening with newly created dynamic groups. Tested by creating a new group with same conditions.
    I tried to take one that was migrated and converted to basic then back to dynamic.
    This did not help with the issue. Almost seems i would have to recreate all the dynamic groups in order for it to work.
    We have almost 1,000 dynamic groups we cannot re-create them all as this would be a logistical nightmare.
    I think I will log a ticket with support.
    Thank you, Lu