Group membership may not populate on the target in the following scenario:
If all users from DomainA and DomainB are migrated to DomainC, and then you attempt to migrate a group that contains members from the opposite source domain, these members may not populate on DomainC.
In this scenario, the LinkResolver attempts to look up the GUIDs of the source members in the target domain by looking in the matching attribute (ExtensionAttribute15 by default). However, since the members from the other domain must use different matching attributes in the target than the group, the search fails and the members are not resolved.
To resolve this issue, enable the synchronization of SIDhistory, and select it as a matching rule. When the initial matching attribute search fails, it will fall back to the matching rules, and since the source SID from the other domain will be present in the target SIDhistory attribute, the group member will be resolved successfully.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center