List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: RE: RE : RE: RE : RE: [ActiveDir] How to delete Lingeringobjects on a live object ! HELP

Prev Next

You are not authorized to post a reply.

Author

Messages

ZJORZ

Posts:389

11/14/2007 8:03 AM
time issues like you have had can be a PITA... just resetting the time back does NOT guarantee a healthy DC. A lingering object is NOT detected until scanned for manually or detected automatically after a change occured on the lingering object. It looks like you cleaned one DC and then you think the others are OK... Sorry not true. It depends on a lot of things... The best way is to have ONE or more DCs you consider healthy and check the rest against it. Another solution would be a demotion and promotion. This is the result of experiencing replication issues for whatever reason (e.g. DNS, time warp back and forth) and not cleaning up as it should be. you already said it was the 5th time. If not done correctly, there will probably be a 6th time... Met vriendelijke groeten / Kind regards, Ing. Jorge de Almeida Pinto Senior Infrastructure Consultant MVP Windows Server - Directory Services LogicaCMG Nederland B.V. (BU ISA Eindhoven) ( Tel : +31-(0)40-29.57.777 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : ________________________________ From: ActiveDir-owner@mail.activedir.org on behalf of Yann Sent: Wed 2007-11-14 20:40 To: ActiveDir@mail.activedir.org Subject: RE : RE: RE : RE: [ActiveDir] How to delete Lingeringobjects on a live object ! HELP Yes, that works fine, but this scenario tend to appear from time to time. The first appearance of those LOs was due to the clock of the motherboard of one of my DC. The time of the clock was fixed to 2017. No one could acces (Remote desktop or a net view) to the DC. MOM warned me multiple error and kerberos access denied error. I rebooted the unsafe DCs and after, MOM warned me about the 1988 eventID from DCs in my Domain. When i open a session and go to eventviewer, i noticed that the eventids was in 2017... ;( It was the start of the appearance of the LOs :( I called MS PSS who helps me cleaning them. Several weeks after, LOs appear again. I was suprised because no warning nor access denied from any of my DCs appear. I call again MS and ask them why LOs still there ? They told that LOs are and will remain in AD until a process accesses the LOs.Then 1988 eventids appear.. I asked them how to definitely remove them ? MS told me that there was no solution, and the only solution was to clean them as soon as they appear and set strcit replication consistency. ;( So today was the 5th time that we detected LOs in my domain. Yann "Almeida Pinto, Jorge de" a écrit : >>>>What i do not understand is why i can not get rid of these LOs definitively ? what do you mean? Didn't the command work? Met vriendelijke groeten / Kind regards, Ing. Jorge de Almeida Pinto Senior Infrastructure Consultant MVP Windows Server - Directory Services LogicaCMG Nederland B.V. (BU ISA Eindhoven) ( Tel : +31-(0)40-29.57.777 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : ________________________________ From: ActiveDir-owner@mail.activedir.org on behalf of Yann Sent: Wed 2007-11-14 17:43 To: ActiveDir@mail.activedir.org Subject: RE : RE: [ActiveDir] How to delete Lingeringobjects on a live object ! HELP you're right Jorge ! I'm a bit ashame .... ran the command in the wrong way.. ! :( Thanks very much that works. What i do not understand is why i can not get rid of these LOs definitively ? Yann "Almeida Pinto, Jorge de" a écrit : looking at your command line again....there is something not correct...why? well, you are comparing the GOOD DC against the BAD DC, while it should be the other way around. it should be REPADMIN /REMOVELINGERINGOBJECTS * Example: * repadmin /removelingeringobjects BAD-DC.ADCORP.LAN ed0c6601-28c1-47e9-b3db-5dcf291d9e31 DC=ADCORP,DC=LAN Met vriendelijke groeten / Kind regards, Ing. Jorge de Almeida Pinto Senior Infrastructure Consultant MVP Windows Server - Directory Services LogicaCMG Nederland B.V. (BU ISA Eindhoven) ( Tel : +31-(0)40-29.57.777 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : ________________________________ From: ActiveDir-owner@mail.activedir.org on behalf of Yann Sent: Wed 2007-11-14 12:59 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] How to delete Lingeringobjects on a live object ! HELP Hello, We detected Lingeringobjects (LO) on our AD2k3 SP FFL mode. a the repadmin /removelingeringobjects safe_destintation_dc guid_source_DC_unsafe does not work. Eventid 1939 states "numbers of objexcts deleted on source:0". That command worked fine for previous LOs detected BUT not on that particular object. We found that this object is a live user account used in Production and the starting point of the appearance of the LO corresponds to the fact that the user logged on to the domain ! So that explained how this LO appears... But how to delete this LO knowing that it is in use and that when it is uses, AD detects it as a LO and so block all replication ? The Repadmin /removelingeringobjects has no effect on this live object :( I was thinking of deleted this account... not sure. Any helps will be appreciated. Yann ________________________________ Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. ________________________________ Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail Click here to report this email as spam. ________________________________ Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > RE: RE : RE: RE : RE: [ActiveDir] How to delete Lingeringobjects on a live object ! HELP

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads