Active Directory Ghost Object replication issue
i have windows 2003, single forest 50 domains. changing, deployable system not domains connected , online @ times.
some months ago 2 of these domains held in transit , tombstoned. before connected forest again went our hardware support department "cleaned" meaning remove dust etc, instead wiped arrays on servers.
our level 4 support team reanimated these node after restoring them old backup.
this backup did not refelect ad when deleted, therefore have several orphaned objects form domains. domains functioning correctly , replicating, however, gc in forest inconsistent , orphaned/ghost objects still being replicated.
we have rehosted directory partitions problem nodes online domains works fine, domain comes online orphaned objects again replicated global catalog. nature of our system means cannot control when other domains coming online rehost them before replicating object items gc.
i have made several ldap queries , can see items no longer exist on problem domain, reference objects in gc directory partitions of domains.
the biggest issue have these objects mail enabled users and when gal queries gc repopulating them.
i've hit bit of wall , not know how can remove these ghost objects without having domains online @ same time , rehosting problem domains partitions forest wide. i'd appreciate assistnce.
i have asked question before less detail i'm having go!
so looks fixed.
i'm not 100% sure believe ghost objects in gc not being correctly identified tombstoned/lingering objects due way in dcs domains restored.
i made changes ad structure objects has forced forest identify them being lingering/tombstoned objects.
i rehosted domain partitions forest root , has replicated everywhere else successfully. prior attempts rehost partition had not stopped ghost objects retun gc other domains. gal has queried gc correctly , acocunts no longer exist.
so not know 100% issue working. thanks help.
Windows Server > Directory Services
Comments
Post a Comment