An alternative to custom user groups without active directory integration is through user group integration that applies your existing active directory structure, providing many benefits.
Once you import existing directory service user groups as Workspace ONE UEM user groups, you can perform the following actions:
Workspace ONE UEM ensures that device management and syncing continues even during rare lapses in connectivity. You can improve the performance of Directory Services by ensuring that the server maximizes available resources.
If the directory sync of a tenant times out 3 times in a row, Workspace ONE UEM skips that tenant and proceeds to synchronize the next tenant, as applicable. A sync times out if a device does not respond for 15 minutes. This timing means that the maximum delay is 45 minutes before the next tenant sync attempt.
A console event log is created after the third sync timeout with the following properties.
If the link to the VMware Enterprise Systems Connector is not working or if the test connection fails, then the sync fails to begin. The next tenant sync commences according to the Lightweight Directory Access Protocol (LDAP) configuration.
The console event log is created after a VMware Enterprise Systems Connector connection error with the following properties.
For more information about the Event Log, see Event Log.
Ensure the Directory Sync Service and the Scheduler Service are running on the same server, since they write to and read from the same queues.