In our environment, when a user is going out of the office, his
department group should be removed.

We are trying to achieve this by the following code:
<do-remove-dest-attr-value class-name="User" direct="true" name="Group
Membership">
<do-remove-dest-attr-value class-name="User" direct="true"
name="Security Equals">

The log shows (group1 is our location to the group):
<modify-attr attr-name="Group Membership">
<remove-value>
<value>\IDM-TREE\group1</value>
</remove-value>
</modify-attr>
<modify-attr attr-name="Security Equals">
<remove-value>
<value>\IDM-TREE\group1</value>
</remove-value>
</modify-attr>

later I see in the log (user1 is the user, group1 is our location to
the group):

[07/31/12 03:00:12.513]:SAPtekst PT: Pumping XDS to eDirectory.
[07/31/12 03:00:12.513]:SAPtekst PT: Performing operation modify for