Controlling Domain Admins

Hi!

I have been asked to control 'Domain Admins' members in FIM.

For some reason, that I cannot figure out, the AD MA cannot see the membership of 2 specific users during import. The 2 users are in the connectorspace as user objects.

So, every time the MA exports I get an error, that the users are already members. But when importing, they are not there as members.

All other users in the group works just fine.

I guess it is a security problem, but I cannot figure out where the problem is.

anyone tried this?

Thanks,

Søren.