it is: repadmin /showobjmeta GC: "CN=User-ROOT-01,OU=Users,OU=ORG,DC=ADCORP,DC=LAN" the output will something like: repadmin running command /showobjmeta against server ed0c6501-28c1-47e9-b3db-5dcf281e9e31._msdcs.ADCORP.LAN
26 entries.
Loc.USN Originating DC Org.USN Org.Time/Date
Ver Attribute
======= =============== ========= =============
=== =========
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 objectClass
12417 Default-First-Site-Name\ROOTDC002 12417 2006-02-13 11:48:46
1 cn
12417 Default-First-Site-Name\ROOTDC001 14299 2006-02-13 11:41:54
1 description
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 givenName
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 instanceType
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 whenCreated
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 displayName
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 nTSecurityDescriptor
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 name
12417 Default-First-Site-Name\ROOTDC001 14282 2006-02-13 11:40:34
4 userAccountControl
12417 Default-First-Site-Name\ROOTDC001 14278 2006-02-13 11:40:34
1 codePage
12417 Default-First-Site-Name\ROOTDC001 14278 2006-02-13 11:40:34
1 countryCode
12417 Default-First-Site-Name\ROOTDC001 14279 2006-02-13 11:40:34
2 dBCSPwd
12417 Default-First-Site-Name\ROOTDC001 14278 2006-02-13 11:40:34
1 logonHours
12417 Default-First-Site-Name\ROOTDC001 14279 2006-02-13 11:40:34
2 unicodePwd
12417 Default-First-Site-Name\ROOTDC001 14279 2006-02-13 11:40:34
2 ntPwdHistory
12417 Default-First-Site-Name\ROOTDC001 14279 2006-02-13 11:40:34
2 pwdLastSet
12417 Default-First-Site-Name\ROOTDC001 14278 2006-02-13 11:40:34
1 primaryGroupID
12417 Default-First-Site-Name\ROOTDC001 14280 2006-02-13 11:40:34
1 supplementalCredentials
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 objectSid
12417 Default-First-Site-Name\ROOTDC001 14278 2006-02-13 11:40:34
1 accountExpires
12417 Default-First-Site-Name\ROOTDC001 14279 2006-02-13 11:40:34
2 lmPwdHistory
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 sAMAccountName
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 sAMAccountType
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 userPrincipalName
12417 Default-First-Site-Name\ROOTDC001 14277 2006-02-13 11:40:34
1 objectCategory
0 entries.
Type Attribute Last Mod Time Originating DC
Loc.USN Org.USN Ver
======= ============ ============= =================
======= ======= ===
Distinguished Name
=============================
repadmin running command /showobjmeta against server
01570860-7552-4789-a9ec-401dc63fc8d8._msdcs.ADCORP.LAN
DsBindWithCred to 01570860-7552-4789-a9ec-401dc63fc8d8._msdcs.ADCORP.LAN failed
with status 5 (0x5):
Access is denied.
BY THE WAY: don't look at the last line with the access denied as I did this in
a test env where I'm testing some things with lingering objects
cheers,
Jorge
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : <see sender address>
________________________________
From: [EMAIL PROTECTED] on behalf of [EMAIL PROTECTED]
Sent: Wed 2006-05-03 19:29
To: ActiveDir@mail.activedir.org
Cc: ActiveDir@mail.activedir.org; [EMAIL PROTECTED]
Subject: RE: [ActiveDir] which GC answers?
I have a problema running that:
this is one of the objects I want to delete, foudn with ldp
>> Dn: CN=adriao,CN=Users,DC=esgoto,DC=sabesp,DC=com,DC=br
1> canonicalName: esgoto.sabesp.com.br/Users/adriao;
1> cn: adriao;
1> distinguishedName:
CN=adriao,CN=Users,DC=esgoto,DC=sabesp,DC=com,DC=br;
4> objectClass: top; person; organizationalPerson; user;
1> name: adriao;
what is the exactly DN I have to use?
I tried this ways
C:\>REPADMIN /SHOWOBJMETA GC:
CN=adriao,CN=Users,DC=esgoto,DC=sabesp,DC=com,DC=br > OUTPUTfile.TXT
C:\>REPADMIN /SHOWOBJMETA GC: Dn:
CN=adriao,CN=Users,DC=esgoto,DC=sabesp,DC=com,DC=br :> OUTPUTfile.TXT
C:\>REPADMIN /SHOWOBJMETA GC:
<Dn=CN=adriao,CN=Users,DC=esgoto,DC=sabesp,DC=com,DC=br> > OUTPUTfile.TXT
none of them worked.
What is the right command?
what is wrong?
Tnaks a lot
_______________________________________________
Adrião Ferreira Ramos
[EMAIL PROTECTED]
Equipe Suporte Windows
(11) 3388-8193
"Almeida Pinto, Jorge de" <[EMAIL PROTECTED]>
Enviado Por: [EMAIL PROTECTED]
03/05/2006 11:20
Favor responder a
ActiveDir@mail.activedir.org
Para
<ActiveDir@mail.activedir.org>
cc
Assunto
RE: [ActiveDir] which GC answers?
a way to check this is:
REPADMIN /SHOWOBJMETA GC: <DN of lingering object> > OUTPUT.TXT
GC: targets ALL GCs in the forest
For each GC:
* you get the metadata of the object if it exists on the GC
OR
* you get "Directory object not found" if the object does not exist
in addition to this you can wrap a script around this that takes away some
manual stuff you must do.
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : <see sender address>
________________________________
From: [EMAIL PROTECTED] on behalf of [EMAIL PROTECTED]
Sent: Wed 2006-05-03 14:44
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] which GC answers?
When I use ldp and I found a user (lingering) how can I know which GC of many
of them has that copy of the object? I use ADSIEDT, but I have many GC´s. is
there a easier way to discover in which of them it is?
Thanks
Adrião F Ramos
This e-mail and any attachment is for authorised use by the intended
recipient(s) only. It may contain proprietary material, confidential
information and/or be subject to legal privilege. It should not be copied,
disclosed to, retained or used by, any other party. If you are not an intended
recipient then please promptly delete this e-mail and any attachment and all
copies and inform the sender. Thank you.
<<winmail.dat>>
