After upgrading to 7.6 HF3 AD import rules for Roles and Accounts fail to run.
Issue is with both Full and Delta updates. Other AD import rules are not affected.
If you run full import first time, it will finish successfully. Second run will fail with below error.
After first successful run, next runs ended with error:
Task error: Specified cast is not valid.
Specified cast is not valid.
[System.InvalidCastException @ System.Data]
Altiris.DirectoryServices.NSDirectoryItems.DirectoryImportTask.DoDirectoryImportTask(String taskid, String importXml, Boolean bUpdateImport)
SQL stored procedure spDirectoryRuleReadRoleAccountMemberships and part of the code responsible for this type of import
This issue has been addressed with the ITMS 7.6 HF4 release (See
There is manual SQL workaround to run immediately, as well as pointfix over HF3 is planned to be released ASAP.
*** WORKAROUND SQL QUERY FOR IMMEDIATE CUSTOMER HELP ***
NB! this fix makes roles and account R/A import being more "full" than "update", but helps to avoid rule fail.
DROP PROCEDURE [dbo].spDirectoryRuleReadRoleAccountMemberships
CREATE PROCEDURE [dbo].spDirectoryRuleReadRoleAccountMemberships
select ad.[Path] as [Account], rad.[Path] as [Role],
ad._ResourceGuid as [AccountGuid],
rad._ResourceGuid as [RoleGuid],
ISNULL(rad._ResourceGuid, 0x0) as [uSNChanged]
from vRM_Account ac WITH (NOLOCK)
inner join Inv_Import_Rule_Imported_Items ri WITH (NOLOCK)
on ri._ResourceGuid = ac.[Guid]
and ri.ImportRuleGuid = @rule
inner join Inv_Global_Active_Directory_Details ad WITH (NOLOCK)
on ad._ResourceGuid = ac.[Guid]
inner join ResourceAssociation ra WITH (NOLOCK)
on ra.ChildResourceGuid = ac.[Guid]
and ra.ResourceAssociationTypeGuid = '63468f04-6751-448d-891c-b59906360a27'
inner join Inv_Global_Active_Directory_Details rad WITH (NOLOCK)
on rad._ResourceGuid = ra.ParentResourceGuid
ORDER BY ad.[Path]
Subscribing will provide email updates when this Article is updated. Login is required.