The name listed in ADUC is the CN of the user object by default. There are
no uniqueness requirements on the CN other than it be unique in its
container. If you look at the sAMAccountName (pre-Windows 2000 login) for
each object, I'm sure you'll find they are different. I would guess someone
has made a copy of the user object and put it in another container. You
could use ADSIEdit to find and delete the spurious object.

-gil

Gil Kirkpatrick
CTO, NetPro


-----Original Message-----
From: Thomas [mailto:[EMAIL PROTECTED] 
Sent: Sunday, July 20, 2003 11:37 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] 


couple of days ago I noticed some strange things in
our active directory:

there are two accounts, one user account and a machine
account, that are listed twice as members of domain users respectively
domain computers. I always believed this was impossible under every
circumstances, but this proved me wrong. every tool I use, including MS's
'Active Directory Users and Computers' gives me duplicate entries for the
account membership lists as well as for the group members lists. since I
could not find a way to reproduce this on another account, I suppose it must
have happened during migration from win nt 4.0.

so, does anyone else have experienced this phenomenon or
does anybody know the real reason for this?

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to