Skip to content

Commit 4de5877

Browse files
authored
Update ad-group-not-discovered.md
Edit review per CI 9082
1 parent 8a690e7 commit 4de5877

1 file changed

Lines changed: 7 additions & 7 deletions

File tree

support/mem/configmgr/discovery/ad-group-not-discovered.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Delta AD Group Discovery Doesn't Detect Group Membership Changes in Nested OUs
3-
description: Troubleshoot an issue in which AD Delta Discovery fails to detect group membership changes in child organizational units.
3+
description: Troubleshoot an issue in which AD Delta Discovery doesn't detect group membership changes in child organizational units.
44
ms.date: 01/12/2025
55
ms.reviewer: kaushika, jarrettr, brianhun, payur
66
ms.custom: sap:Boundary Groups, Discovery and Collections\Active Directory Discovery (all types)
@@ -17,9 +17,9 @@ This article helps you identify this issue in your environment, and provides wor
1717

1818
## Symptoms
1919

20-
You set up discovery scopes for Active Directory Group Discovery to target specific Active Directory Domain Services (AD DS) groups as described in [Configure Active Directory Group Discovery](/intune/configmgr/core/servers/deploy/configure/configure-discovery-methods#bkmk_config-adgd). The initial full discovery cycle correctly discovers groups in all the in-scope OUs.
20+
You set up discovery scopes for AD Group Discovery to target specific Active Directory Domain Services (AD DS) groups, as described in [Configure Active Directory Group Discovery](/intune/configmgr/core/servers/deploy/configure/configure-discovery-methods#bkmk_config-adgd). The initial full discovery cycle correctly discovers groups in all the in-scope OUs.
2121

22-
Later, after the delta discovery cycle runs, you notice that changes in particular group memberships are missed. However, if you force a full discovery cycle to run, the issue resolves as the full discovery cycle discovers changes in all groups in the in-scope OUs.
22+
After the delta discovery cycle runs, you notice that changes in particular group memberships are missed. However, if you force a full discovery cycle to run, the issue resolves as the full discovery cycle discovers changes in all groups in the in-scope OUs.
2323

2424
In particular, the issue occurs when you define scopes that resemble the following example:
2525

@@ -29,20 +29,20 @@ In particular, the issue occurs when you define scopes that resemble the followi
2929

3030
In this example, the delta cycle of AD Group Discovery doesn't detect changes in Group B's membership.
3131

32-
If you want to review log entries to confirm this behavior in your system, see [More information](#more-information).
32+
If you want to review log entries to verify this behavior in your system, see [More information](#more-information).
3333

3434
## Cause
3535

36-
During the delta cycle of AD Group Discovery, Configuration Manager detects the organizational units (OUs) of the target groups in the discovery scopes and then builds a tree structure of OUs. It ignores any child OUs of the target groups' OUs.
36+
During the delta cycle of AD Group Discovery, Configuration Manager detects the OUs of the target groups in the discovery scopes, and then builds a tree structure of OUs. It ignores any child OUs of the OUs in the target groups.
3737

3838
During the full discovery cycle of AD Group Discovery, Configuration Manager uses a different algorithm that doesn't ignore child OUs. Therefore, the discovery process works as expected.
3939

4040
## Workaround
4141

4242
Microsoft is aware of this issue. To work around this issue, use any of the following methods:
4343

44-
- Move all groups to top-level OUs. For the earlier example, that means moving Group B to another OU that isn't a child of OU-A (or any other OU in the discovery scopes).
45-
- Reconfigure the discovery scopes to include the child OUs as target OUs. For the earlier example, that means including OU-B in the discovery scopes as an Organizational Unit.
44+
- Move all groups to top-level OUs. For the earlier example, this action means moving Group B to another OU that isn't a child of OU-A (or of any other OU in the discovery scopes).
45+
- Reconfigure the discovery scopes to include the child OUs as target OUs. For the previous example, this action means including OU-B in the discovery scopes as an Organizational Unit.
4646
- Use only the full discovery process for AD Group Discovery.
4747

4848
## More information

0 commit comments

Comments
 (0)