B
BCE
I have an issue within a single domain involving Global catalog servers.
The build is an empty forest root, with 4 individual child domains off of that root.
GC replication is happening, except one domain has what looks like name collisions.
The account lives in another child and is working fine, but doing a lookup on the entire directory within another domain finds the good account and a previous version of the account that ends with the sid identifier. You cannot open it, you cannot delete it as the object this domain sees is no longer accurate.
Using replmon has not shown any issues, and was even successful once it getting it to disappear for a few hours, only to come back.
This is only happening on 1 domain when you do a search for this user with entire directory as the search from option. The other three child domains do not have this problem.
I cannot seem to find any article on removing bad objects from a GC.
I have used ndsutil in safe mode for semantic checker and still no go.
Any help is greatly appreciated.
The build is an empty forest root, with 4 individual child domains off of that root.
GC replication is happening, except one domain has what looks like name collisions.
The account lives in another child and is working fine, but doing a lookup on the entire directory within another domain finds the good account and a previous version of the account that ends with the sid identifier. You cannot open it, you cannot delete it as the object this domain sees is no longer accurate.
Using replmon has not shown any issues, and was even successful once it getting it to disappear for a few hours, only to come back.
This is only happening on 1 domain when you do a search for this user with entire directory as the search from option. The other three child domains do not have this problem.
I cannot seem to find any article on removing bad objects from a GC.
I have used ndsutil in safe mode for semantic checker and still no go.
Any help is greatly appreciated.