I am trying to write a script (or can use process step) that will remove all of a person's AD group memberships when an attribute changes. The script I wrote identifies the correct groups but just running a delete on the ADSAccountinADSGroup record is not working. A sql trace on the session is showing an insert into dialogprocess prior to the delete statement running when using Manager to remove the group but I can only see the bind variables, not the actual values being inserted.
Does anyone know how to accomplish this or another way it can be done?
Thanks
Eric
