Expected sync result for On-premises Active Directory server appears inaccurate when syncing users and groups

Environment

• Knox Manage
• On-premises Active Directory (AD)

Overview

When you preview sync results for users and groups before syncing your On-premises AD server with Knox Manage, you may notice that the User and Group counts on the Expected Sync Result popup appear inaccurate.

Cause

The expected sync result preview uses the root DN to calculate the total counts for the selected targets, not the base DN configured in your Knox Manage connection settings. As a result, the displayed numbers may appear inaccurate.

Resolution

This is expected behavior and doesn’t impact the actual synchronization. Only the users and groups you selected are synced, regardless of the expected preview count displayed.