I ran the tool over the weekend and piped out to a file. Adfind reported there were 413091 objects returned. That seems high considering the number of objects in my AD database. We did perform a few tests where we deleted 10,000k or so objects at a time but enought to cause over 400k objects to be deleted.
Would doing an authoritative database restore cause the number of deleted objects to go high? This was performed about 3 weeks ago. When reviewing the last 1000 lines of the results the data looked like I would have expected, just a few deletes here and there. Steve Schofield ----- Original Message ----- From: "joe" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, March 18, 2005 2:38 PM Subject: RE: [ActiveDir] AD Database size questions. > I would initially say take a peek at your deleted objects and see if you > have a ton of stuff in there. You can use ldp or adfind to do this. Adfind > is probably friendlier, you simply specify the -showdel option and look for > objects with isdeleted=TRUE or look in the deleted objects container. > > Note that by default, you need to have admin rights to see into the deleted > objects container in Active Directory. > > Something like > > Adfind -b "cn=deleted objects,dc=domain,dc=com" -showdel > > Will dump all objects (and their attributes) of all tombstoned objects in > the domain.com nc. > > joe > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield > Sent: Friday, March 18, 2005 2:08 PM > To: [email protected] > Subject: Re: [ActiveDir] AD Database size questions. > > All the script does is either Adds users (a few at a time), updates one > attribute or deletes the user. As far as a lot of transaction are > concerned, the system was designed to hit a sql database first and determine > what changes need to happen then go to AD and update information. There > aren't a lot of transactions per say against AD. Thanks for the heads up. > > Steve > > > ----- Original Message ----- > From: "Bernard, Aric" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Friday, March 18, 2005 1:19 PM > Subject: RE: [ActiveDir] AD Database size questions. > > > Not knowing what your script does for sure, keep in mind that as objects > are deleted they are first 'tombstoned' before being purged. Therefore > the space initially used by the object prior to being deleted is not > completely available for reuse a portion of it will continue to be > consumed by the tombstone object until the tombstone lifetime has > expired an the object has purged. > > I had a customer that was testing scripts against their production AD > and saw growth of the DIT to the tune of several GB over the course of a > week. Their script created 200,000 user/contact objects in an OU and > then processed them in several different ways. After the completion of > the script, the results would be analyzed and then the objects would be > deleted for another try... > > Regards, > > Aric > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield > Sent: Friday, March 18, 2005 10:02 AM > To: [email protected] > Subject: [ActiveDir] AD Database size questions. > > Hi, > > I'm not sure if this is a problem but something seems not exactly right > with > the size of my AD database. AD has about 10,000 user id's and a few > servers. The size of the AD database over the last few days has grown > from > 900 meg to 1.4 gig. We haven't added any a lot more objects to cause > this > type of growth. > > We do have a script that runs every 5 minutes that adds, updates, > removes > users that are used by a program that does LDAP look-ups. This is about > the > only thing because it runs so often I can contribute to it but not sure. > There are no errors in the event log but the growth of 500 meg in a few > days > concerns me. I looked around and didn't find much pertaining to this > subject. Any thoughts, suggestions on determining whitespace in the AD > database? > > Steve Schofield > [EMAIL PROTECTED] > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
