Active Sync error

Question

Hi,
When i change any attribute of a user in the Authoritative Directory the Active Sync configured senses this chnage and calls the Update User Workflow and the chnages get refelcted in Identity Manager.
But when the user to be updated has some capability and controlled organisation then the Active Sync is not callling the Update User Workflow. In the Active Sync logs i can see the error as "Since you have directly assigned one or more capabilities to testuser, you must also directly assign at least one Contolled Organistaion.
Can anyone tell me where am i goin wrong and what changes i would need to make for this?
Thanks in advance,
deep

Answer 1

my suggestion was based on the error message you got.... and i use the strategy.. using adminRoles usually, instead of assigning directly ... but wont be feasible in all cases.
from the error message, its clear that some how the forms/ process involved does not find the controlled organization.
try adding to the following to form....
<Field name='waveset.controlledOrganizations'>
     <Default>
          <ref>waveset.controlledOrganizations</ref>
     </Default>
</Field>
<Field name='waveset.capabilities'>
     <Default>
          <filterdup>
               <appendAll>
                    <ref>waveset.capabilities</ref>
                    <!-- if u need to add any more capabilities, add the capability here and  use the appendAll, and filterdup, else you can neglect those -->
               </appendAll>
          </filterdup>
     </Default>
</Field>and these fileds should have a disable like the following..... in case yoou want these fields to be processed during an update only.
<Disable>
   <neq>
      <ref>feedOp</ref>
      <s>update</s>
   </neq>
</Disable>Make sure u r using the same type - default / derivation / expansion for both the capability and controlled organizations in your Active Sync forms / rules etc....
that's all what i could suggest....
Thanks
Nishad