Re: Duplicate Computer Account Objects CNF???
- From: Wayne Tilton <Wayne_Tilton@xxxxxxxxxxxxxxxx>
- Date: Tue, 01 Nov 2005 16:21:42 -0800
=?Utf-8?B?Um9i?= <Rob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:848BD63B-0036-495D-BE3A-E918D84EC642@xxxxxxxxxxxxx:
> I'm not sure if this is the right newsgroup for this but i'm hoping to
> get an idea as to a problem i'm seeing in our AD.
>
> I'm beginning to see something like duplicate computer name for
> example:
>
> seat001
> Seat001CNF:0e60630b-2dec-42db-ba54-99f6119a3c06
>
> This has started happening in the last few weeks. i'm not sure whats
> causing it or what the CNF is. The computers seem to work properly but
> I don't know where to start. Does anyone know what the CNF is?
>
> Any help is greatly appreciated.
>
This is ADs way of handling duplicate objects via conflict resolution.
Duplicate objects can occur when an object is created on two different
domain controllers in the same replication interval. For example, if a
computer object named COMP1 is created on DC1 and another computer object
named COMP1 is created on DC2 during the same replication interval, there
is a conflict when they try to replicate the objects. To resolve the
conflict, AD adds CNF:[guid] to one of them and writes an error message
to the log on the DC that detected the conflict.
My personal experience is that this usually happens when creating
computer account manually on one DC and then trying to join the domain
using a different DC (which you have no control over). Since the object
doesn't exist on the 2nd DC, it creates a new one, which results in a
conflict when they replicate with each other.
The error message on the DC tells you which one to keep, which is usually
the one with the latest whenChanged attribute for computers (it is
usually the opposite with users, you want to keep the earliest one as
identified by the whenCreated attribute).
HTH,
Wayne Tilton
.
- Prev by Date: Locking Down a AD domain controller
- Next by Date: Re: Wndows 2000 and 2003 forests and domains
- Previous by thread: Locking Down a AD domain controller
- Next by thread: Re: Duplicate Computer Account Objects CNF???
- Index(es):
Relevant Pages
|
