When trying to grant a ICT license or Role, individually or by group, the changes are not being assumed and saved to the database.
Consequently, the user is not receiving new configuration updates.
Finally, this is only happening on configurations were you have an AD running 2012 functional level and RightsWATCH running on a server 2008.
Running the psGetSID will allow you to test this functionality and you will get the following:
Error querying SID:
No mapping between account names and security IDs was done.
On ICT server, with Debugview you can see messages containing: The group's SID could not be resolved. When trying to add a new user to ICT.
Installing the following KB will solve the problem: