AD Group does not get synced to vIDM after Windows update on AD domain controller to Windows Server 2022 / 2025

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

A group may fail to sync because it would remove all of its users. In sync log:

• Failed to complete sync. Please check safeguards.

In connector-dir-sync.log you may see such messages indicating no users will be synced in a group, where previously there were many members:

• Source directory poll found ## objects.
• GROUP <UUID> (<group@domain>) - 0 member(s)

Environment

VMware Identity Manager 3.3.7

Cause

Windows Server 2022 & 2025 are not supported on unpatched vIDM 3.3.7:

• VMware Identity Manager 3.3.7 Release Notes 

Resolution

Upgrade vIDM to patch CSP-102547 to take advantage of support for Active Directory domain controllers on Windows Server 2022, including a fix for RADIUS authentication issues in HW-170932.