We're facing some issues in production where the ARS engine intermittently falters while building dynamic groups, and they are written to AD with blank members or a fraction of the members. This is causing a lot of hassle for some of our applications.
While Quest Support is assisting us, I want to write a script that will monitor a handful of critical dynamic groups and alert me when the group members list is empty or has dropped dramatically. I built an MU that explicitly includes these groups. In my script I call to both the Request and DirObj objects so that I can compare member data.
My script, utilizing OnPreModify, calls to the [i]member[/i] attribute and works for regular security groups, however when I modify the dynamic groups members it doesn't run. I filter group objects for only when the member attribute is modified as follows:
[i]If (Not libARSAdminTasks.IsAttributeModified(Request, "member")) Then Exit Sub[/i]
With regular AD security groups it processes without issue and I get the figures I need, but never for the Dynamic Groups. I also tried using the [i]edsaMember[/i] attribute but no luck on that either.
When I look at the Change History of both group types, the Dynamic Group does not show changes for [i]member[/i], just for [i]accountNameHistory[/i] and [i]edsaDGConditionsList[/i]
What attribute, or what method, do I have to use to see the Request and DirObj [i]member[/i] values for this group type?
thanks!
While Quest Support is assisting us, I want to write a script that will monitor a handful of critical dynamic groups and alert me when the group members list is empty or has dropped dramatically. I built an MU that explicitly includes these groups. In my script I call to both the Request and DirObj objects so that I can compare member data.
My script, utilizing OnPreModify, calls to the [i]member[/i] attribute and works for regular security groups, however when I modify the dynamic groups members it doesn't run. I filter group objects for only when the member attribute is modified as follows:
[i]If (Not libARSAdminTasks.IsAttributeModified(Request, "member")) Then Exit Sub[/i]
With regular AD security groups it processes without issue and I get the figures I need, but never for the Dynamic Groups. I also tried using the [i]edsaMember[/i] attribute but no luck on that either.
When I look at the Change History of both group types, the Dynamic Group does not show changes for [i]member[/i], just for [i]accountNameHistory[/i] and [i]edsaDGConditionsList[/i]
What attribute, or what method, do I have to use to see the Request and DirObj [i]member[/i] values for this group type?
thanks!