ActiveView Filter Lists Enumerate Objects That Can Only be Added to Groups or Moved to OUs (NETIQKB1654)

fact
Directory and Resource Administrator 6.30.01

fact
Directory and Resource Administrator 6.60

fact
Directory and Resource Administrator 6.40

fact
Directory and Resource Administrator 6.50

symptom
ActiveView Filter Lists Enumerate Objects That Can Only be Added to Groups or Moved to OUs

symptom
An ActiveView rule including all users in a specific domain with the Only allow users to be added to groups or moved to OUs restriction selected does not prevent the user accounts from being displayed in the User View filter list. These objects are not displayed under the Managed Objects tab for the ActiveView.

cause
This behavior is by design. It provides Assistant Admins the flexibility to add a user account to multiple groups from the ActiveView's User View filter list. In some situations customers may wish to display these users only when performing the GroupMemberAdd function but not in User View. If so, then apply hotfix Q12252. After the hotfix is applied, the user accounts will not be displayed in the ActiveView's User View but will still be available in the list when attempting to add a user to the group.

fix
The above described issue was addressed with the release of Hotfix Q12252 for Directory and Resource Administrator (DRA) 6.30 SP1. To obtain Hotfix Q12252 for DRA 6.30 SP1 please contact NetIQ Technical Support.

To restrict the views from displaying non managed objects in DRA 6.40 and later the following file must be modified on the Primary and all Secondary DRA servers:

hideUnmanagedObjectsFlag.js

This file must be modified to include the value of True as follows:

var bHideUnmanagedObjects =True;

By default, this file is located on all IIS servers running the DRA Web Component in the following directory:

\Inetpub\wwwroot\DRAWeb\Admin\lib\js\custom.

For more information on how to configure this in Directory and Resource Administrator verison 7.x, please refer to the following Knowledge Base article:

NETIQKB35214: What does the setting 'Hide source-only objects from console lists' do in Directory and Resource Administrator 7.0?