Resolution:
Description:
============
The "Remove" button to remove an LDAP synchronized group under selected groups through the TIBCO Administrator GUI does not work with Active Directory but the same does works with Sun One Directory.

Can add roles from the corporate LDAP but later cannot remove them.  When going to the LDAP Groups page, we can select the groups but pressing the “Remove” button doesn't do anything.  

Environment:
===========
TIBCO Runtime Agent(TRA) 5.6.x , TIBCO Administrator 5.7.x , Microsoft Active Directory 2003.


Cause:
========
This is a known defect ADM-5116  "Remove" button to remove a LDAP synchronized group under selected groups through Admin GUI does not work with Active Directory but the same works with SunOne Directory".
  
Resolution:
=========
As a workaround filter the unwanted Roles in LDAP configuration for your Admin Domain using DomainUtility.

Open Domainutility --> LDAP Configuration --> Search Parameters --&gtGroup Search Filter --> (&(!(CN=&ltUnwanted Group/Role>  ))(objectclass=group))