It is possible that in a root/child domain scenario there may be mailbox objects in the child domain & contact objects representing these mailbox objects in the root domain (or vice versa).
In this event when group provisioning an error such as that detailed below will be logged & group membership will not be updated.
13:06:48 ERROR: [7302-117-32-00000000] Unable to add group member xxxx.xxxx to CN=\Example,OU=Test,DC=xx,DC=xxx
13:06:48 Search found 2 objects
It has not been possible to determine which object should be added to the group.
This issue can be overcome by applying explicit deny permissions for the NME service account to the OUs in which the objects which are not required to be within scope of the migration reside.
