When migrating groups, you may find that some of the nested groups are synced to the target domain as user objects instead of group objects.
This can occur when the user filter setting on the DirSync profile has been modified or is blank. The user filter is an LDAP query, and the results determine what objects are imported into the BT_Person table in SQL. If group objects are included in these results, it can cause the group objects to be created as user objects in the target environment.
Avoid using blank filters or user filters that will include group objects.
As noted in the DirSync Comprehensive User Guide, Binary Tree recommends that you use the Active Directory Users and Computers management console to test your filters to prevent Directory Synchronization from failing due to an invalid filter.
Note: This article is specifically addressing the user filter, not the group filter. The group filter should contain group objects as normal.
© 2021 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책