Re: Can't delete a corrupt user object



The user isn't corrupt, it is an object that experienced a replication conflict (or collision if you prefer).

ADSIEDIT and LDP both can delete this if you can locate it. In LDP use tree view mode and browse down to it. You should also be able to do this with ADSIEDIT. If you can't find it, either it was already deleted and the GAL is not getting updated (i.e. offline/cached) or you aren't looking in the right place.


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Pinkel wrote:
There are some corrupt user objects in AD. In the exchange addressbook, there is an user object that was deleted.

When you browse in the ad (UAC) where the object is placed, its not there. Only when search on "Entire Directory", then you find the user object like: Clarke,Andrew <square control character> CNF:6a70d5f5- 23d1-9cc2-8e96aff678c2. If you try to delete is, you get an error (Windows cannot delete object Clarke,Andrew <square control character> CNF:6a70d5f5- 23d1-9cc2-8e96aff678c2 because: Directory object not found.

I have used LDP and ADSIEdit, but with both tools i could not find the user object. When you make a new user with the same name (Clarke,Andrew), ad accepts it.

What can i do, to delete the corrupt user object from the ad and addressbook?

.



Relevant Pages

  • Re: Cant delete a corrupt user object
    ... When i do a full search on the Entire Directory and find the user with the square control character, it sould be in the sam OU of the new user with the same name. ... ADSIEDIT and LDP both can delete this if you can locate it. ... Only when search on "Entire Directory", then you find the user object like: Clarke,Andrew CNF:6a70d5f5- 23d1-9cc2-8e96aff678c2. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SID Filtering vs. SIDhistory
    ... Personally I'm quite loyal to ldp, so I don't use the others a ton. ... > That is because the best tool for VIEWING that info is ADFIND... ... > I actually liked some of the functionality of ADSIEDIT in W2K than in XP ... >> Eric Fleischman ...
    (microsoft.public.windows.server.security)
  • Re: seizing master roles and GC
    ... Have you tried to delete it with Ldp? ... We did try a metadata cleanup and ADSIedit. ... ADSIEdit shows that the entery ... >>> We couldn't transfer domain naming master since general catalog could ...
    (microsoft.public.win2000.active_directory)
  • Re: SID Filtering vs. SIDhistory
    ... That is because the best tool for VIEWING that info is ADFIND... ... I actually liked some of the functionality of ADSIEDIT in W2K than in XP ... > Both adsiedit and ldp let you dig in to the directory and modify just about> anything you want. ...
    (microsoft.public.windows.server.security)
  • Re: SID Filtering vs. SIDhistory
    ... don't ever use command line tools. ... > Personally I'm quite loyal to ldp, so I don't use the others a ton. ... >> I actually liked some of the functionality of ADSIEDIT in W2K than in XP ... >>> Use of included script samples are subject to the terms specified at ...
    (microsoft.public.windows.server.security)

Loading