Hi, I'm having a little trouble with the Inbound Attribute Flow CustomExpression's. IIF(Eq(BitAnd(2,groupType),2),”Global”,IIF(Eq(BitAnd(4,groupType),4),”DomainLocal”,”Universal”)) --> Destination: "scope" Returns: "Global" is not a valid attribute. IIF(Eq(BitOr(14,groupType),14),”Distribution”,”Security”) --> Destination: "type" Returns: "Distribution" is not a valid attribute I don't get it, what am i missing? No, Global is not a valid attribute, but it's not supposed to be, it's supposed to be the value of the "scope" attribute. It's the same with the "type" attribute. Both are String's. I followed the http://technet.microsoft.com/en-us/library/ff686936(WS.10).aspx What did i forget?

Are you sure you are using the right " ? Try copy pasting your function and retyping the "'s in the custom expression editor. Here is the difference: yours: ” correct: " I think you copied them from IE and got some variant of them. Because your function looks right to me. http://setspn.blogspot.com

Thanks!

Having the same exact issue here. I've retyped with appropriate " marks, but to no avail. Heck, I've even manually retyped the whole expression with no luck. Any other leads? Here are my expressions: scope: IIF(Eq(BitAnd(2,groupType),2),"Global",IIF(Eq(BitAnd(4,groupType),4),"DomainLocal","Universal")) type: IIF(Eq(BitOr(14,groupType),14),"Distribution","Security") Also recommending an upate to this page in TechNet, as it contains issues with Inbound Flow Attributes.

Have you got the "groupType" attribute checked on your AD MA? Besides that, I can't come up with anything. what is the exact error?http://setspn.blogspot.com

Thomas, that was it! I neglected to add the attribute. Thanks for your help!