We recently discovered something involving AD group placement that caused an issue. The AD groups that were assigned VCO permissions were moved to a different OU. We modified the base DN location in the VC configuration screen, but despite doing this, the permissions didn't adjust location-i.e, instead of appending the group name to the base DN and resolving dynamically, it seems to store the AD group info as a static string.
The only way to fix was to login with the VCO client using the service account, deleting the old groups, and adding the same groups back in from the new location. Is this by design? Thanks.