The Group Membership May Not Be Updated in Delta Mode (281788)


The information in this article applies to:

  • Microsoft Metadirectory Services 2.2
This article was previously published under Q281788

SYMPTOMS

The group membership in the Active Directory group may not be up-to-date when the following conditions occur:
  1. A new person object is brought into the metaverse from any Management Agent (MA).
  2. Simultaneously, the same person object is introduced as a new list member entry in an existing metaverse list.
  3. A Together Administration Management Agent (TAMA) agent subsequently moves the new user into an Active Directory connector space.
  4. The Active Directory MA is run in Delta mode, and then is configured to update Active Directory.
Only the new person entry may be displayed in Active Directory and the group membership may not be updated.

CAUSE

This problem can occur because changes to metaverse objects are preprocessed before they are sent to the Active Directory MA. In this situation, changes made to the metaverse person object occur after the last changes made to the metaverse list object. During the preprocessing phase, all of the changes to a given object are combined into a single, "net" set of changes. Because the person object is modified last, changes to the list object can precede the changes to the person object when they are displayed in the exports to Active Directory.

When the group membership changes are processed, the individual user does not exist in Active Directory, thus the user is not added to the group membership.

RESOLUTION

To resolve this problem, upgrade your computer to Microsoft Metadirectory Services (MMS) 2.2 Service Pack 1 (SP1). If an upgrade is not possible, you can work around this problem by running the MA a second time in Full mode which updates the group membership.

To change the MA to run in Full mode:
  1. Locate the Active Directory MA where the user's group membership had not been updated.
  2. Click Operate MA.
  3. Click the Operational Settings tab.
  4. Click to clear the Operate in Delta Mode check box.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

The group membership is corrected in Active Directory after the next full run of the MA.

If the Delta mode is turned on in the Active Directory MA, the group is not processed a second time when the MA runs again because the MA does not change its list membership.
Modification Type:MinorLast Reviewed:1/25/2006
Keywords:kbbug kbnetwork kbnofix KB281788
©2004 Microsoft Corporation. All rights reserved.