I have AD Group objects which hold two types of members:
username@domainA & username@domainB. Domain A trusts domain B.

On IDM I have AD driver to export groups only to domain A:

In this case if I'm trying to synchronize a group object from IDM to AD
in domain A, it will replace all members of this group on AD, with the
ones from IDM. Hence the user username@domainB will be removed from this

Is there any way to avoid this to happen? So to migrate a group to AD,
still get all users in domainA updated but still keep the domainB
members in group.


dqu002jes's Profile: http://forums.novell.com/member.php?userid=56660
View this thread: http://forums.novell.com/showthread.php?t=449361