Password Sync and Group Name Sync

Hello,

IDM 3.6.1 (eDir ---> AD Sync) on OES11; Remote Loader on Windows Server 2008 R2.

First:
Have several users with UP enabled, but not set, thus causing the password sync status to be "Not Synchronized" between systems for the affected users. Resetting the password or a user login sets the UP, thus changing the status to "Synchronized", but wonder if anyone knows of a way to force the setting of the UP on users who do not have it set without resetting the password or having the users log in?

Second:
Synchronized groups are not getting the "Group Name" appropriately set in AD. Groups are getting a value that starts with a $ set. I applied the latest AD driver patch (3.5.17) on the remote loader, but did not seem to help. The Group and CN attribute are set to synchronized on the subscriber filter channel. Could anyone shed a light here on what could be causing the name attribute not to be properly set?

Thanks -