samba - Mar 2022 - drs replicate causes issues with Azure AD delta sync

Greetings,

Recently I found some results on a few user accounts from an ldapcmp on my
domain controllers. So I replicated the domain partition manually with drs
replicate and --full-sync.

However our next scheduled Azure AD delta sync removed all group members. The
group membership still looked fine in ADUC and all services using the domain
controllers directly still worked fine. Initiating a full sync of Azure AD added
all group members back.

I understand this looks like a bug in Azure AD Connect and we already have a
support ticket with them, however we all know how willing Microsoft is to admit
fault. So is there anything in drs replicate that could trigger this and we
could point Microsoft to how it is importing LDAP information?

Thank you,
Jake Black