> Source: [sk103881](https://support.checkpoint.com/results/sk/sk103881)

# sk103881 - Active Directory (AD) Group update does not update user access role

| Property | Value |
|----------|-------|
| Solution ID | sk103881 |
| Date Created | 2014-12-24 |
| Last Modified | 2019-10-07 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * A URL filtering rule that is using Access Role does not match user's AD group correctly.
* AD group updated in Domain Controller Server, but gateway's Access Roles for the changed users are not updated. The gateway rules do not match the user with associated roles.

## Cause

The "*pdp __reconf_update_all disable* " command has been applied due to the symptom in [sk98590](http://supportcontent.checkpoint.com/solutions?id=sk98590). (After the policy installation pdpd process utilizing 100% CPU and/or LDAP servers are overloaded.)

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content