Group Membership is not in sync (groups have extra members in the target), full re-sync does not resolve the issue (4280923)

You may experience a problem where group membership becomes out of sync - target groups may contain members that were previously removed in the source.  Performing a full re-sync does not resolve the problem.  Group membership may still synchronize - if you add a user to a source group, this change is synced - but there are still extra members in the target.

This may occur if you have performed a full re-sync immediately after removing group members on the source.  A full re-sync does not pick up deletions in multi-valued attributes - the existing values are simply synced to the target, and deletions may be lost. 

The reason this occurs is because, unlike a delta sync, a full re-sync does not query the source for changes.  It simply reads the current values of all source attributes, and applies them to the target.  This normally does not cause a problem, but if a multi-valued attribute had an entry deleted just before the full re-sync, QMM is not aware of this deletion.

There is a script to resolve this problem. Group Membership Reporter This script compares source and target group membership, and creates an LDIF file that you can apply to the target to put the groups back in sync.  The instructions are included in the ZIP file - please follow them carefully.

The version 1.3.2 is still the latest version and operational at this time - November 2019

***Information***

You must use SQL in mixed mode if you are using AD credentials if not you must use the SA credentials to connect to the Database after you create it.