Unable to import AD security Groups in SharePoint 2010 hence does not shows in Membership

  • Article

 

Recently came across with one Membership issue, we were unable to see the Membership Tab in my profile Users memberships and Also we were not able see in the MIISclient even though the User Profile Full Synchronization Job was completed successfully.

In the ULS logs also we were not seeing any error.

I have managed to resolve the issue by following below steps.

Attribute hideDLMembership was set to "True" for the AD Groups hence it was not getting Exported in the MIIScleint.

clip_image001

 

  • You can use your LDAP/Active Directory tool of choice, including ADSIEdit, to modify it.
  • AD security group Attribute hideDLMembership we need to set as FALSE.
  • Re-run the Profile import again. Now we will see that AD groups in the MIISclient and MySite Membership page.

More Details:

You can run the following command against the problematic AD groups in the AD and get to know about the properties.

ldifde -m -f c:\output.txt -d "CN=test,cn=USERS,dc=dctest,dc=com"

In the output.txt we can find the "hideDLMembership" details.

OR

We can take the netmon trace from the Sharepoint server while running the import in the UPA.

Open the Netmon logs and type below filter string in the "Filter Option".

ContainsBin(FrameData, ASCII, "hideDLMembership")

you will find the below:

""""""""""

2075481 8:24:56 PM 4/23/2012 1381.1918453 miiserver.exe Uñ..äó.Òh.ÿ!.ÑK.×Â.Øc.Õ©.üÛ.±’Ò..פ.ûÞ.úŠ.?;top.group...V.€œ.€Ô.û...û+..û:...Ñ....displayName.testgrp.?...Ñ....groupType.0xffffffff80000002.?."Ñ.

...hideDLMembership..true.?..„?..member

"""""""""""