RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

[Mulnick, Al]

Sounds like two issues then.  First is that replication of a deleted object never fully replicated in Active Directory.  The second is that ADC still has record for that account joining the 5.5 account to a phantom Active Directory object.    The ADC uses msexchadcglobalnames as a way to track users.  It stamps this field on the 5.5 side and the Active Directory side.  To remove the join, you basically want to remove this join information from both sides.  Here's a description of the field use http://support.microsoft.com/default.aspx?scid=kb;en-us;316280 and how to remove the join http://support.microsoft.com/default.aspx?scid=kb;en-us;256862   After stopping the ADC and cleaning the 5.5 side, you'll want to fix the delete replication to ensure that the match occurs properly when you restart the ADC.  If you don't, you'll likely rematch the existing "supposed to be deleted" object in Active Directory.  ADSIEDIT is likely going to be helpful here or possibly LDP if you prefer.   I haven't tried this last one before, but just for reference http://support.microsoft.com/default.aspx?scid=kb;en-us;317097  Maybe somebody else has a better way of removing that object that should be gone anyway.   Al  From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 12, 2004 4:12 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Orphaned GC Entry... How do I clean it up? There appears to be two entries for User in the AD Global Catalogues.  The one account appears to have been ADC'ed & unADC'ed "Doe, John (XYZ)" at some point, the other account appears to have been ADC'ed, but then deleted (Never un ADC'ed) "Doe, John (XYZCORP)-1".  Both accounts appear in our Domain's GC, and All the Child domain GC's except the Child domain where the account originated.  The "Doe, John (XYZ)" exist in their GC, but not the "Doe, John (XYZCORP)-1".  Both accounts were homed in the child domain, just one got deleted, the other didn't.   We are now trying to ADC a mailbox in the parent domain, to a different account all together.  The ADC process is failing because it seems to still think the mailbox we are ADCing is linked to  "Doe, John (XYZCORP)-1".   This account no longer exist in the child domain, and we don't know how to unADC and account that doesn't exist.   Any help would be appreciated   Todd   From: Mulnick, Al [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 12, 2004 3:54 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?   Can you redescribe that for us?  It sounds like you have a GC that wasn't supposed to be there, but I'm not sure I follow completely.       From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 12, 2004 3:09 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Orphaned GC Entry... How do I clean it up? Greetings all, we are seeing an entry appear in our GC's that is not in the original location.  It appears after it was deleted, it did not replicate out the deleted item, and now us causing ADC issues.   http://support.microsoft.com/default.aspx?scid=kb;en-us;293474   The recommended MS way seems a little excessive.  Does anyone have a better way of getting ahold of the entry and getting it out of the directory?   Thanks,   Todd