Ability to trigger a dynamic group update
It would be wonderful if there was a way to trigger a re-sync of dynamic groups after changes are made. Right now some changes take over 24 hours to show and when experimenting with new dynamic rules it makes it difficult to see results. The trigger could be something like the Reset and Resync box in Enterprise Apps provisioning or just a Powershell applet that can be run.
Bill Kaage
shared this idea
Our feature team is looking into options for addressing this scenario, but we do not yet have any timelines to share. For now as a workaround, you can manually trigger the reprocessing by updating the membership rule to add a whitespace at the end. We’ve also added the ability to check the membership processing status, to keep track of the status and know if processing is complete.
76 comments
-
Jonathan
commented
This is incredibly needed.
Enrollment process is a PITA because of the period of waiting ... -
Anonymous
commented
Any updates on this?
-
Tony
commented
3 1/2 years later, this still hasn't been implemented?
-
Marina Maier
commented
We have the same problem. The synchronization takes about 12 hours per user. We need a total of 140 users and depend on this function. For this reason we need a result and improvement as soon as possible.
I am already in contact with Azure Support and ask for a quick fix.
-
Scott Wilson
commented
Looks like the way to go now is to use filters https://www.youtube.com/watch?v=_UuMfbvY8hw&t=198s
-
Nico
commented
I also have some dynamic groups that are not updating, others will?
-
Ryan Spooner
commented
This is very much needed. Having to wait for hours, if not days, for a dynamically populated group to update is frustrating to say the least, especially when that group currently has members in it that you don't want to be (eg. license assignment).
-
UV
commented
We found out last week, that there are still some issues with dyn groups updates that are sometimes super-slow (we use groups that are bigger than 10k devices), or where the new group members are not reflected in timely manner in the Autopilot enrollment profiles, that we target using these groups.
A friend of mine managing smaller tenants (<100 devices), also had this issue, or sometimes groups not repopulating at all, so there is probably a global backend performance problem somewhere... As usual with Intune support when you report them such problems : this is "work in progress", or problem simply disappears the next day when they come back to you, and you have to close the ticket :-(.
IMO, I would not ask to have a button to re-evaluate the group : I just want the group to be populated quickly and with no bugs.
-
Anonymous
commented
Hi, I have some dynamic security groups that have not been updated for days...??
-
Scott Jones
commented
Microsoft. Please fix this ASAP. In the meantime, please re-enable the workaround. Our customers are suffering while this is not working properly.
-
BUELENS Geert
commented
The workaround (updating the membership rule) is not working...
And this request is already 3 years old. I'm really wondering if Azure/O365 is the right tool to go for... -
PATRICK, MARTIN
commented
This is a real problem and Microsoft will need this voted up more before they consider doing anything about this. Spam your coworkers with this link and ask them to vote.
-
Stefanski, Patrick J
commented
Ugh. It's frustrating that this is even a question. It's not a feature request, it's a break-fix. This is broken, there's no excuse for it not being treated as something that must be urgently fixed.
AD has always sucked, but AAD is worse. You guys should have bought e-Directory from Novell when they went under. At that point they emulated AD better than Microsoft, so no compatibility issues, and then you'd have had a real, standards based X.500 directory to build your cloud ecosystem out with, instead of scaling out the bolt-ons-bolted-on-to-the-bolt-ons garbage.
Really wish there were better alternatives for enterprise users.
-
Mike
commented
Any update on this. It can really be useful.
-
Colin
commented
This really needs to be addressed...
-
Duwe
commented
Has that timeline been decided yet? the lack of this feature is just ridiculous.
-
Anonymous
commented
the whitespace trick doesn't seem to work anymore, group 'last update' value stays the same and no changes are made in group members
-
Olav Rønnestad Birkeland
commented
After I changed membership rule on a dynamic user group membership today, 1 hour later it still haven't reevaluated membership. There needs to be a way to trigger a recheck of membership. Or at least saving a changed query should trigger membership evaluation instantly.
-
Adam Sher
commented
A workaround that seemed to do the trick for me was to add a redundant expression, save, remove the redundant expression, then save again.
For example, changing:
(device.displayName -startsWith "tis-") and (device.deviceOwnership -eq "Company")
to:
(device.displayName -startsWith "tis-") and (device.deviceOwnership -eq "Company") and (device.deviceOwnership -eq "Company")
then back to:
(device.displayName -startsWith "tis-") and (device.deviceOwnership -eq "Company") -
Jim Barr
commented
Let's see... a feature request that has been sought after for well over a year, no indication when dynamic updates are successfully updated, and a jerkwater workaround that attempts to "trick" the system into functioning properly offered as a tier 2 solution... all from our friends at the Monopoly of the Century known as Microsoft. When will this company take their victims, er customers seriously?