Question

[Workflow] Find Group Activity Is Not Returning AD Group Membership

Workflow

Updated October 21

asked on September 19 • Show version history

Our organization chart is defined in AD groups. I want to leverage these groups to file personnel documents in a folder structure that matches our org chart.

I have created an LDAP Trustee Directory and successfully connected to it.

I have checked the 'Retrieve Group Members' box in the Lookup Options.

The Find Group activity is definitely finding the group when I run the workflow:

I know there are seven users in this group but the group membership count is only 1. And it must just be the name of the group because when I try to run it through a 'For Each Row' activity, it treats it as if there are no rows at all.

So, what am I doing wrong? Is it some kind of permissions issue where the service account running workflow can do enough LDAP to find the group but not enough to get the membership? I am not able to log on as the service account to test this.

What workarounds are there? I was thinking I could sync these groups with the LFDS and then query them by setting up a Laserfiche Directory Server trusted directory but I don't want to license these users and the LFDS says if they aren't licensed then they won't be synced.

I have gotten the 'Find Group' activity to work with Repository Groups but then I'd be stuck manually adding individual users and there are 40+ groups to manage. Since it's already being managed via AD anyway, I would prefer to pull the membership from AD directly rather than create duplicate groups to manage.

So, any thoughts? What am I not understanding here?

Thanks!

EDIT: We just upgraded to Workflow 12 if that matters.

0 0

Answer

SELECTED ANSWER

replied on September 22

There was a known issue #613303. If the AD group has a user whose name contains '-', no members could be found in Find Group activity.

1 0

Replies

replied on September 21

- In Workflow Designer, how many members can you see in the members tab?

- For the group members, is there any special chars there, like + < { _?

- For the group members, are they groups or users?

- For for each row activity, was it bound to the Find Group output members?

1 0

replied on September 22 • Show version history

In Workflow Designer, how many members can you see in the members tab?

I hadn't thought to look at the 'Additional Properties' before. ~~Oddly enough, yes, all of the members are returned there.~~

I opened the wrong version of the workflow that was still using Repository Groups. The version that uses the AD Groups do return any members even though I know they are there.

For the group members, is there any special chars there, like + < { _?

The are two dashes in the name of the group. ~~The members are returned as DOMAIN\user.name.~~

For the group members, are they groups or users?

Users.

For for each row activity, was it bound to the Find Group output members

It's bound to "Group Members".

Turns out looking at the "Members" tab allowed me to solve this. Apparently it's case sensitive. If you are looking for domain\user.name but it's actually DOMAIN\user.name then apparently it won't find the user in the group.

Hopefully this doesn't cause a problem with users who might have been put in the system as DOMAIN\User.Name. I think we have a few of those in our AD. Will have to find a workaround if so. Maybe there's some Regex magic I can do or something.

I looked at the wrong version of the workflow. The one with Repository Groups. Repository Groups return members but AD Groups do not. So, unfortunately, the problem persists.

0 0

SELECTED ANSWER

replied on September 22

There was a known issue #613303. If the AD group has a user whose name contains '-', no members could be found in Find Group activity.

1 0

replied on September 23

I do realize that this isn't quite the same situation but I'm willing to bet it's failing for the same reason. It doesn't matter if the "-" is in the group name or the user name, it's not going to be able to find any members in the group.

0 0

replied on October 21

Hi there,

The bug 613303 has been fixed and released in 2025H2 release (12.0.2510.3321).

Regards,

Qinmei

0 0

You are not allowed to follow up in this post.

Question

Question

[Workflow] Find Group Activity Is Not Returning AD Group Membership

Answer

Replies

Sign in to reply to this post.