For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Seth_Cooper's avatar
Seth_Cooper
Icon for Employee rankEmployee
Mar 03, 2015

Hey Nick,

I have reproduced the issue you are seeing. The only group your computer is in is also the primary group for that computer. In the AD Query object you need to enable "Fetch Primary Group". This will populate the session.ad.last.attr.memberOf session variable with the group your computer is in. After I enabled it on my env I got the following entry...

 489fcf1a.session.ad.last.attr.memberOf 47 CN=Domain Computers,CN=Users,DC=cooper,DC=local

As you can see "Domain Computers" is the primary group and it wouldn't be returned unless you enable it in the AD Query.

Please test and let me know if this resolves your issue.

Seth