Els's blog

Monday, July 03, 2006

Lingering Objects

Last week I taught my Active Directory In-Depth course, so today one more blog on AD.

This one is about lingering objects, an annoying phenomenon that could cause deleted objects to return in your Active Directory database.

Lingering objects will appear if one of your domain controllers hasn't been able to synchronize with its replication partners during a tombstone lifetime.

This is what happens: you create a number of objects. These objects will nicely replicate to all your DCs. Then, for some reason 1 of the DCs can no longer replicate with the others (due to a network problem, DNS failures, issues with time synchronization, ...).
In the mean time you delete a user from your database. The problem DC does not replicate this change however and the object still exists in that database.
After a tombstone lifetime (default 60 days, and 180 days if the forest was created on Windows Server 2003 SP1) the deleted objects are actually removed from the AD database on the good DCs, but the bad one still sees these objects as normal objects.
At that moment, you become aware of the problem. You solve the issues and try to replicate with the bad DC to get it up to date again.

Then, one of two things can happen.
  • If your DC is a Windows 2000 server, the bad DC will replicate with the good ones and the deleted objects will return in your environment.
  • If your DC is a Windows Server 2003 machine, the bad DC will not be allowed to replicate because it has been out of date for more than one tombstone lifetime.
How do you fix this?
  1. Use repadmin (Support Tools) to remove the lingering objects from the bad DC.
    repadmin /removelingeringobjects 'DNS name bad DC' 'GUID good DC' 'Directory partition DN' /advisory_mode
    For example: repadmin /removelingeringobjects dc1.example.com A0AE6093-15F5-4DB8-836B-4495E3A15396 dc=example,dc=com /advisory_mode
    This will display a list of lingering objects in the Directory Services event log (look for event id 1946). Then you can run the same command again, this time without the advisory_mode switch. This will actually remove all lingering objects from the problem DC (look for event id 1945).
  2. At this point, you still won't be able to replicate with the bad DC. To fix this, add the following registry key:
    HKEY_LM\System\CurrentControlSet\Services\Ntds\Parameters
    Allow Replication With Divergent and Corrupt Partner
    REG_DWORD
    1
  3. Force replication: everything should be fine now.
  4. After replication succeeded, do not forget to reset the above registry key to 0!!
This week, I'll be looking at Vista again. So you can expect more Vista blogs!

19 Comments:

  • Is this method is also applicable on dc with usn rollback issues??

    By Blogger Monsieur Myswissbank, at 3:16 PM  

  • Hello, the method to recover from lingering objects can not be used to recover from usn rollback.
    Take a look at my previous post, there you will find the methods to recover from USN rollback.
    Els

    By Blogger Els, at 3:29 PM  

  • Hi

    From witch dc do i start repadmin /removelingeringobjects? from a good DC or from a bad DC?
    Thanks
    Regards
    Ivan

    By Anonymous Anonymous, at 11:45 AM  

  • I wish not acquiesce in on it. I think warm-hearted post. Especially the title-deed attracted me to be familiar with the whole story.

    By Anonymous Anonymous, at 2:56 PM  

  • Amiable dispatch and this fill someone in on helped me alot in my college assignement. Thank you as your information.

    By Anonymous Anonymous, at 12:27 PM  

  • Opulently I agree but I about the collection should prepare more info then it has.

    By Anonymous Anonymous, at 4:20 AM  

  • [u][b]Xrumer[/b][/u]

    [b]Xrumer SEO Professionals

    As Xrumer experts, we secure been using [url=http://www.xrumer-seo.com]Xrumer[/url] for a wish fix for the time being and recollect how to harness the titanic power of Xrumer and go off it into a Banknotes machine.

    We also yield the cheapest prices on the market. Diverse competitors desire order 2x or consistent 3x and a a pile of the opportunity 5x what we pervade you. But we have faith in providing gigantic service at a small affordable rate. The whole incidental of purchasing Xrumer blasts is because it is a cheaper substitute to buying Xrumer. So we train to keep that thought in cognizant and provide you with the cheapest rate possible.

    Not solitary do we be suffering with the most successfully prices but our turnaround time payment your Xrumer posting is super fast. We intention have your posting done ahead of you know it.

    We also produce you with a ample log of successful posts on contrasting forums. So that you can catch a glimpse of over the extent of yourself the power of Xrumer and how we have harnessed it to benefit your site.[/b]


    [b]Search Engine Optimization

    Using Xrumer you can think to realize thousands upon thousands of backlinks over the extent of your site. Myriad of the forums that your Location you will be posted on oblige high PageRank. Having your join on these sites can categorically help establish up some crown rank help links and uncommonly as well your Alexa Rating and Google PageRank rating through the roof.

    This is making your put more and more popular. And with this increase in regard as well as PageRank you can expect to see your place really downright gamy in those Search Motor Results.
    Transport

    The amount of see trade that can be obtained by harnessing the power of Xrumer is enormous. You are publishing your locality to tens of thousands of forums. With our higher packages you may equivalent be publishing your position to HUNDREDS of THOUSANDS of forums. Create 1 post on a stylish forum disposition by enter 1000 or so views, with signify 100 of those people visiting your site. At once devise tens of thousands of posts on celebrated forums all getting 1000 views each. Your freight ordain function because of the roof.

    These are all targeted visitors that are interested or singular about your site. Imagine how divers sales or leads you can execute with this great loads of targeted visitors. You are line for line stumbling upon a goldmine primed to be picked and profited from.

    Keep in mind, Above is Money.
    [/b]

    GO YOUR CHEAPLY ERUPTION TODAY:


    http://www.xrumer-seo.com

    By Anonymous Anonymous, at 6:18 AM  

  • [B]NZBsRus.com[/B]
    Dismiss Laggin Downloads With NZB Downloads You Can Hastily Find HD Movies, PC Games, MP3 Albums, Applications and Download Them @ Fast Speeds

    [URL=http://www.nzbsrus.com][B]Usenet[/B][/URL]

    By Anonymous Anonymous, at 4:51 AM  

  • [B]NZBsRus.com[/B]
    Escape Slow Downloads With NZB Downloads You Can Instantly Search High Quality Movies, Console Games, MP3 Singles, Software and Download Them @ Blazing Rates

    [URL=http://www.nzbsrus.com][B]Newsgroup[/B][/URL]

    By Anonymous Anonymous, at 5:03 AM  

  • Infatuation casinos? into this advanced [url=http://www.realcazinoz.com]casino[/url] advisor and grab up online casino games like slots, blackjack, roulette, baccarat and more at www.realcazinoz.com .
    you can also obstruct our additional [url=http://freecasinogames2010.webs.com]casino[/url] orientate at http://freecasinogames2010.webs.com and pull right to memoirs compressed comprehend !
    another current [url=http://www.ttittancasino.com]casino spiele[/url] machination is www.ttittancasino.com , pro german gamblers, an arrangement well-wishing online casino bonus.

    By Anonymous Anonymous, at 4:46 PM  

  • Someone deleted a variety of links from x7.to and depositfiles servers.

    From now, we will use www.tinyurlalternative.com as our main [url=http://www.tinyurlalternative.com]url shortener[/url], so every url will be there and visible for everyone.

    You can pick out from many great [url=http://kfc.ms]short url[/url] address like:

    kfc.ms easysharelink.info jumpme.info megauploadlink.info megavideolink.info mygamelink.info myrapidsharelink.info mytorrentlink.info myurlshortener.com mywarezlink.info urlredirect.info urlshrinker.info weblinkshortener.com youtubelink.info and many others.

    They include over 60 other available domains and the [url=http://myurlshortener.com]url shortener[/url] service work well for free without any registration needed.

    So we assume it is good notion and propose you to use [url=http://urlredirect.info]url redirect[/url] service too!

    Thank you.

    By Anonymous Anonymous, at 7:02 AM  

  • Amiable dispatch and this fill someone in on helped me alot in my college assignement. Gratefulness you seeking your information.

    By Anonymous Anonymous, at 9:49 AM  

  • Making money on the internet is easy in the hush-hush world of [URL=http://www.www.blackhatmoneymaker.com]blackhat marketing[/URL], Don’t feel silly if you have no clue about blackhat marketing. Blackhat marketing uses little-known or not-so-known ways to produce an income online.

    By Anonymous Anonymous, at 5:38 PM  

  • You could easily be making money online in the undercover world of [URL=http://www.www.blackhatmoneymaker.com]blackhat video[/URL], You are far from alone if you have no clue about blackhat marketing. Blackhat marketing uses little-known or misunderstood methods to produce an income online.

    By Anonymous Anonymous, at 5:30 AM  

  • www.pornvideoonline.info

    www.pornvideodownload.info

    www.pornvideotorrent.info

    www.gaypornonline.info

    www.teenpornonline.info

    http://www.freepornvideosonline.info

    http://www.bestpornvideo.info

    [url=http://www.pornvideoonline.info]Porn video online[/url]
    [url=http://www.pornvideodownload.info]Porn video download[/url]
    [url=http://www.pornvideotorrent.info]Porn video torrent[/url]
    [url=http://www.gaypornonline.info]Gay porn online[/url]
    [url=http://www.teenpornonline.info]Teen porn online[/url]
    [url=http://www.freepornvideosonline.info]Free porn videos online[/url]
    [url=http://www.bestpornvideo.info]Best porn video[/url]

    By Anonymous Anonymous, at 11:34 PM  

  • money [url]http://www.333eur.com/[/url]

    By Anonymous Anonymous, at 2:09 AM  

  • url to [b]download software for windows[/b] is available at:

    download software for windows
    [url=http://www.downloadsoftwareforwindows]download software for windows[/url]

    [url=http://www.downloadsoftwareforwindows/products/download-youtube-downloader/productpage.php]download youtube downloader[/url]

    download youtube flv url

    By Anonymous Anonymous, at 2:32 AM  

  • Thanks for good stuff

    By Anonymous Anonymous, at 2:18 PM  

  • By Anonymous Anonymous, at 7:07 PM  

Post a Comment

<< Home