When you try to save an AD filter or role mapping in the RM Unify AD Sync Configuration tool, the error below is displayed:
 "RM.Networks.IdentityManagement.ConfigTool has stopped working".

On looking in the Windows® server application log files you may also see the event ID 16397 with the description below:
"Windows(R) Lightweight Directory Access Protocol (LDAP) failed a request to connect to Active Directory Domain Services(R) for Windows user <DOMAIN\identitysyncservice>".

This has been known to occur in the following instances:

1. the AD security group you are trying to use in the AD filter or role mapping failed to create successfully.
2. in the AD filter, the distinguished names of the organisational unit and the desired group both contain an OU or CN with name Users.

To resolve this issue, follow the steps below:

1. Using 'Active Directory Users and Computers', view the membership of the security group you have been trying to use in the AD filter or role mapping.
2. There should be no members but, if there are, make a note of them.
3. Delete and recreate the security group; you can use the same or a new group name.
4. Add any members you found in step 2.
5. Create the AD filter or role mapping using the newly created group.

To resolve this issue, follow the steps below:

1. Move the desired group to a new location in AD, where its distinguished name does not contain an OU or CN with name Users. The group name itself can retain the word Users, e.g. RM Unify Users.

If you find neither of the solutions work and your issue is with the creation of an AD filter, try adding the group to the AD filter first before selecting the container for the AD filter.