I am using Policy Builder to sync groups to AD. If the 'sync to AD' box is
checked, the group sync's over with memberships. If the box is unchecked,
I leave the group but clear out the memberships.
The problem is if it is re-checked. I cannot seem to get the right rule to
re-populate that membership list. The XML tht is produced with my rule
(below) has the correct number of members being added, but the id's are all
the same - The first one on the list! As a workaround I could remove the
association when the box is unchecked, but that will cause other
workarounds that I would rather not do.
anyone have a suggestion on how to get the member list across?

-Thanks for your time

Here is my rule:
<rule>
<description>Add Flag: Group - umhsAdGrp - Add all members (Route
?)</description>
<conditions>
<and>
<if-class-name op="equal">Group</if-class-name>
<if-op-attr name="umhsAdGrp" op="changing-to">true</if-op-attr>
</and>
</conditions>
<actions>
<do-for-each>
<arg-node-set>
<token-attr name="Member"/>
</arg-node-set>
<arg-actions>
<do-add-dest-attr-value name="Member">
<arg-value type="dn">
<token-attr name="Member"/>
</arg-value>
</do-add-dest-attr-value>
</arg-actions>
</do-for-each>
</actions>
</rule>