Directory service user synchronization

A non-transitory computer-readable medium embodying a program that, when executed by at least one computing device, causes the at least one computing device to at least:

• in an instance in which a user account comprising an identifier is detected as omitted from a list of managed users managed by a management service, search a first directory service for a plurality of first user attributes based at least in part on the identifier;
• receive the plurality of first user attributes from the first directory service;
• determine that the plurality of first user attributes includes a global identifier;
• searching a second directory service for a plurality of second user attributes based at least in part on the global identifier;
• receive the plurality of second user attributes from the second directory service;
• and
• enroll a client device in the management service, the management service configured to enforce at least one compliance rule based on the user account being assigned to a group based on one of the plurality of second user attributes.

A system, comprising:

• a data store;
• at least one computing device in communication with the data store, the at least one computing device being configured to at least:
• in an instance in which a user account comprising an identifier is detected as omitted from a list of managed users managed by a management service, search a first directory service for a plurality of first user attributes based at least in part on the identifier;
• receive the plurality of first user attributes from the first directory service;
• determine that the plurality of first user attributes includes a global identifier;
• search a second directory service for a plurality of second user attributes based at least in part on the global identifier;
• receive the plurality of second user attributes from the second directory service;
• and
• enroll a client device in the management service, the management service configured to enforce at least one compliance rule based on the user account being assigned to a group based on one of the plurality of second user attributes.