Failed AD privileges

Hi Experts,

Presently I am working on SAP IDM 7.2 SP9. Need your help to fix one issue.

In my current project there are so many users whose AD privileges status is failed due to CN/DN issue while their account already exist in AD.

Is there any way to find all those users whose AD privileges status is failed in IDM. All these privileges are assigned under the IDM Attribute MXREF_MX_PRIVILEGE.

Could yopu please share the steps to fix these issue. I can not delete those AD account as they are already in use.

Thanks in Advance

Regards,

C Kumar