I am using Policy Builder to sync groups to AD. If the 'sync to AD' box is
checked, the group sync's over with memberships. If the box is unchecked,
I leave the group but clear out the memberships.
The problem is if it is re-checked. I cannot seem to get the right rule to
re-populate that membership list. The XML tht is produced with my rule
(below) has the correct number of members being added, but the id's are all
the same - The first one on the list! As a workaround I could remove the
association when the box is unchecked, but that will cause other
workarounds that I would rather not do.
anyone have a suggestion on how to get the member list across?

-Thanks for your time

Here is my rule:
<description>Add Flag: Group - umhsAdGrp - Add all members (Route
<if-class-name op="equal">Group</if-class-name>
<if-op-attr name="umhsAdGrp" op="changing-to">true</if-op-attr>
<token-attr name="Member"/>
<do-add-dest-attr-value name="Member">
<arg-value type="dn">
<token-attr name="Member"/>