Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

 

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Subject: RE : [ActiveDir] URGENT. Needs help for removing Lingering Objects from forestDNS zone partition .
Prev Next
You are not authorized to post a reply.

AuthorMessages
boubbhaUser is Offline

Posts:34

03/07/2007 5:44 AM  
I think i've got it ! I used a DC that does not replicate the ForestDnsZones ! I found the good script form Jorge "CleanLingeringObjects.zip". One question about the script, if Jorge saw my thread.... :) I'd like to do a lingering objects(lo) cleanupto*ALL* my DCs inthe forest (healthy or unhealthy), just to be sure that there will no lo that will appear anymore..... :( Could it be done with your script ? Thanks, Yann Yann a écrit: Hello all, I have detected lingering objetcts(lo) in my AD2k3 FFL mode -> eventid 1988. My AD is made up of
One root and 3 childs domain. Yesterday i had lo onone of my childdomain NC so i did a: REPADMIN /REMOVELINGERINGOBJECTS dcsource.child1.AD.SNCF.FR guidofhealthydc DC=child1,DC=root,DC=FR And that works fine for the domain NC. Today, i had an other lo on Forestdnszone NC :( This is a party or the error 1998 concerning this NC ".....This event is being logged because the source DC contains a lingering object which does not exist on the local DCs Active Directory database. This replication attempt has been blocked.The best solution to this problem is to identify and remove all lingering objects in the forest.Source DC (Transport-specific network address):0569a63e-6c33-4429-96ba-30a62a08d7ca._msdcs.root.FR Object:DC=_ldap._tcp.MYSITE._sites.gc\0ADEL:6b473e74-ef28-4305-8506-05c5dbb92b15,CN=Deleted
Objects,DC=ForestDnsZones,DC=root,DC=FR Object GUID:6b473e74-ef28-4305-8506-05c5dbb92b15 User Action:Remove Lingering Objects:........" When i did a on the dcsource that have lo and is localized in my child2 Domain REPADMIN /REMOVELINGERINGOBJECTS dcsource.child2.AD.SNCF.FR guidofhealthydc DC=ForestDnsZones,DC=root,DC=FR /advisory_mode I have this error: DsReplicaVerifyObjectsW() failed with status 8440 (0x20f8): Can't retrieve message string 8440 (0x20f8), error 1815. I launched this command with domain child2 admin and entreprise admin, and the same error appears. When i searchfor the meaning of error 8440 -> err 8440 stated ERROR_DS_DRA_BAD_NC => The naming context specified for this replication operationis invalid. How can I
remove lo from the forestDNS zone partition ? Please help, Yann Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.

Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions !
Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.
ZJORZUser is Offline

Posts:131

03/09/2007 2:51 AM  
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}









You need to specify a healthy DC for each domain in the forest

You need to specify all the unhealthy DCs the forest

See the readme.txt

Met
vriendelijke groeten / Kind regards,

__________________________________________________________________________________

MVP
Profile à
https://mvp.support.microsoft.com/profile=f8c04f4a-bff2-453e-9aed-7dfedab0be10

MVP
Home Site à https://mvp.support.microsoft.com/

MVP
Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à
http://blogs.dirteam.com/blogs/jorge/default.aspx

__________________________________________________________________________________

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Yann
Sent: Wednesday, March 07, 2007 11:44
To: ActiveDir@mail.activedir.org
Subject: RE : [ActiveDir] URGENT. Needs help for removing Lingering
Objects from forestDNS zone partition .

I think i've got it !

I used a DC that does not replicate the ForestDnsZones !

I found the good script form Jorge
"CleanLingeringObjects.zip".

One question about the script, if Jorge saw my thread.... :)

I'd like to do a lingering objects(lo)
cleanupto*ALL* my DCs inthe forest (healthy or unhealthy),
just to be sure that there will no lo that will appear anymore..... :(

Could it be done with your script ?

Thanks,

Yann


Yann a écrit:



Hello all,

I have detected lingering objetcts(lo) in my AD2k3 FFL mode
-> eventid 1988.

My AD is made up of One root and 3 childs domain.

Yesterday i had lo onone of my childdomain NC so
i did a:

REPADMIN /REMOVELINGERINGOBJECTS dcsource.child1.AD.SNCF.FR
guidofhealthydc DC=child1,DC=root,DC=FR

And that works fine for the domain NC.

Today, i had an other lo on Forestdnszone NC :(

This is a party or the error 1998 concerning this NC

".....This event is being logged because the source DC
contains a lingering object which does not exist on the local DCs Active
Directory database. This replication attempt has been blocked.

The best solution to this problem is to identify and remove all lingering
objects in the forest.

Source DC (Transport-specific network address):
0569a63e-6c33-4429-96ba-30a62a08d7ca._msdcs.root.FR
Object:
DC=_ldap._tcp.MYSITE._sites.gc\0ADEL:6b473e74-ef28-4305-8506-05c5dbb92b15,CN=Deleted
Objects,DC=ForestDnsZones,DC=root,DC=FR
Object GUID:
6b473e74-ef28-4305-8506-05c5dbb92b15

User Action:

Remove Lingering Objects:........"

When i did a on the dcsource that have lo and is localized
in my child2 Domain

REPADMIN /REMOVELINGERINGOBJECTS dcsource.child2.AD.SNCF.FR
guidofhealthydc DC=ForestDnsZones,DC=root,DC=FR /advisory_mode

I have this error:

DsReplicaVerifyObjectsW() failed with status 8440 (0x20f8):
Can't retrieve message string 8440 (0x20f8), error 1815.

I launched this command with domain child2 admin and
entreprise admin, and the same error appears.

When i searchfor the meaning of error 8440

-> err 8440 stated ERROR_DS_DRA_BAD_NC => The
naming context specified for this replication operation
is invalid.

How can I remove lo from the forestDNS zone partition ?

Please help,

Yann

Découvrez une nouvelle façon d'obtenir des réponses à toutes
vos questions ! Profitez des connaissances, des opinions et des expériences des
internautes sur Yahoo!
Questions/Réponses.





Découvrez une nouvelle façon d'obtenir des réponses à toutes
vos questions ! Profitez des connaissances, des opinions et des expériences des
internautes sur Yahoo!
Questions/Réponses.
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > RE : [ActiveDir] URGENT. Needs help for removing Lingering Objects from forestDNS zone partition .



ActiveForums 3.7
AdventNet Banner
Friends

Friends

Namescape
Members

Members

MembershipMembership:
Latest New UserLatest:kosciesza69
New TodayNew Today:3
New YesterdayNew Yesterday:1
User CountOverall:4319

People OnlinePeople Online:
VisitorsVisitors:75
MembersMembers:0
TotalTotal:75

Online NowOnline Now:

Ads

Copyright 2008 ActiveDir.org
Terms Of Use