App Control: AD Login Changes Not Reflected in Console Until Successful Login

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Changes to Active Directory Policy Mapping not showing in console till the user logs in. 
• Disabled accounts still showing active in the CB Protection Console

Environment

• App Control Server: All Supported Versions
• Active Directory Integration Enabled

Cause

Active Directory changes are not pulled automatically, they only pull once a login session has been established. 

Resolution

The user will show the correct status only after a login attempt is made with the correct username or password. 

Additional Information

If you'd like to see AD role mapping update automatically, please upvote https://community.carbonblack.com/t5/Idea-Central/Force-update-of-AD-Group-Membership-on-Console-User-Accounts/idi-p/72197