Symantec Management Platform (Notification Server)

I have been trying to get to the bottom of this one. I have an OU with 250 objects that I want to import.

I have used the Active Directory Import tool from the Action menu and targeted just that OU.

It always seems to miss a couple of machines. There is suppose to be 250 machines, but on the last import, it displays 197 within the Directory Filter. What could be going wrong?

If you go and run this manually, or if you check the logs at the scheduled time, do you see any informational, warning, or error messages relating to the import in terms of why this didn't import everything?

Are all of the objects active in AD and not disabled?

Does it miss the same machines each time?

Does the rule say "...Import some computers on..."?

I think by default "Basic Import Constraints" are enabled and prevent disabled computer records from being imported.

I believe the problem was due to the imports being performed at "busy" times of the day. I performed one this morning, and noticed 2 machines missing. After refreshing my AD view, I noticed the machines were now missing from that OU - a collegue had moved them.

However, I do believe that there was something wrong, I couldn't see it in the logs, but there were messages like this:

"Deadlock encountered during MessagingResource.Save"

And the details do mention a computer name that probably was not imported. I cannot confirm this as all machines have now imported correctly.

Does an import ignore machines that are disabled?

No, all computers were enabled, and I also ensured the import included "all" computers.