Missing attributes from MS AD
Running OSX El Capitan 10.11.1 on a Mac mini (late 2014) 3 GHz Core i7 16 GB 16000 MHz DDR3 1 TB fusion Drive. OSX Server is running with Profile Manager, and Open Directory. Server is joined to a Windows 2012 R2 (functional level) MS ADDS 4 DC Domain.
When using the directory utility to browse the Windows Domain and also when using Profile manager (MDM), there are users that have all the dsAttrTypeNative: attributes, and then there are users that are missing some. The attribute of concern, dsAttrTypeNative:memberof, is the one needed by the MDM in order to provision apps to groups.
The image above reflects the attributes for an account that has all the attributes.
The image above reflects the attributes for an account that does not have all the attributes.
please help
Mac mini, OS X El Capitan (10.11.1), Server 5.0.15