In DNS, look at the _msdcs.CSG-IT.NET zone and see if you can find that GUID in there.

Look in your Site and Services and go to the server “VMDC”. Look at the NTDS Settings for that server and see if you can find a connection with that GUID.

 

In either case, if you find that GUID, just whack it.

 

Sincerely,

 

D�j� Ak�m�l�f�, MCSE+M MCSA+M MCP+I

Microsoft MVP - Dir. Services / Security

www.readymaids.com - we know IT

www.akomolafe.com

Do you now realize that Today is the Tomorrow you were worried about Yesterday?� -anon

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Friday, April 08, 2005 10:12 AM
To: [email protected]
Subject: RE: [ActiveDir] GUID resolution

 

I've looked at the guid's of all the dc's in my forest and none match the guid that shows up in the directory services error on the event log on my dc.

 

where the heck is it pulling that guid and how can i find out?

could it be a dc that was disconnected from the network for over 60 days and tombstoned? even so, wouldn't all the dc's know that and not rep with it?

 

thanks

 

 

[EMAIL PROTECTED] wrote:

> Tom,

>

> Not sure how many DCs you have (im assuming its not a 3 digit number)

>

> If im understanding the prob correctly, you are suspecting to have a

> stale records somewhere in ntds..

>

> Why not you work out the other way round - grab a list of your current

> DCs - resolve those GUID, and find out which of the dc guid is not

> there (something like that)...

>

> If its autogenerated - perhaps KCC manual trigger should takes care of

> the deleted dsa?

>

> Thank you and have a splendid day!

>

> Kind Regards,

>

> Freddy Hartono

> Windows Administrator (ADSM/NT Security)

> Spherion Technology Group, Singapore

> For Agilent Technologies

> E-mail: [EMAIL PROTECTED]

>

> -----Original Message-----

> From: [EMAIL PROTECTED]

> [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom

> Sent: Friday, April 08, 2005 10:37 PM

> To: [email protected]

> Subject: RE: [ActiveDir] GUID resolution

>

> I'm replying to my own post.

> I think this means this guid can't be found in AD?

> However, my DC keeps logging errors that it can't replicate with it.

> This has been going on for days.� My DC must be getting the guid from

> somewhere, but where?

> any help would be great.

> thanks

>

>

> Kern, Tom wrote:

>> Even with the brackets and guid=, i get this error now-

>>

>> ldap_search_s(ld, "<guid=c47ca389-0832-41bc-8030-3e0c7fd13674>", 1,

>> "(objectclass=*)", NULL,� 1, &msg) Error: Search: Referral. <10>

>> Result <10>: 0000202B: RefErr: DSID-03100698, data 0, 2 access points

>> �� ref 1: 'gc.ms-dcs.CSG-IT.NET:3268'

>> �� ref 2: 'gc._msdcs.CSG-IT.NET:3268'

>>

>> Matched DNs:

>> Getting 0 entries:

>>

>> Any idea what this means?

>>

>> Thanks

>>

>>

>>

>>

>>

>>

>>

>>

>>

>>

>>

>>

>> [EMAIL PROTECTED] wrote:

>>> You are missing the closing ">".

>>>

>>> Regarding the question on GUID binding syntax, 2K supports both

>>> octet string and "COM" GUID style with dashes.� Just don't get them

>>> mixed up. The octet string is NOT the same as the COM GUID with no

>>> dashes.

>>>

>>> bcd3e267-50ff-4780-afd6-d1bb3785ada5

>>> and

>>> 67E2D3BCFF508047AFD6D1BB3785ADA5

>>> are equivalent.� Note the change of byte order on the first DWORD

>>> and the first 2 WORDs.

>>>

>>> Also, you can search by GUID and use them in LDIF files (generally

>>> for creating schema with fixed schemaIDGUID):

>>>

>>> (objectGUID=\67\E2\D3\BC\FF\50\80\47\AF\D6\D1\BB\37\85\AD\A5)

>>> and

>>> Z+LTvP9QgEev1tG7N4WtpQ==

>>> For the Base64 that LDIF requires.

>>>

>>> With SID binding, 2003 supports SDDL format and octet string, but

>>> 2K supports octet string only.

>>>

>>> HTH,

>>>

>>> Joe K.

>>>

>>> -----Original Message-----

>>> From: [EMAIL PROTECTED]

>>> [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom

>>> Sent: Thursday, April 07, 2005 5:55 PM

>>> To: [email protected]

>>> Subject: RE: [ActiveDir] GUID resolution

>>>

>>> I'm running win2k sp4 in mixed mode.

>>> heres the result i get from prepending "GUID"-

>>>

>>> ldap_search_s(ld, "<GUID=c47ca389-0832-41bc-8030-3e0c7fd13674", 1,

>>> "(objectclass=*)", attrList,� 0, &msg)

>>> Error: Search: Invalid DN Syntax. <34>

>>> Result <34>: 0000208F: NameErr: DSID-031001AA, problem 2006

>>> (BAD_NAME), data 8350, best match of:

>>> � '<GUID=c47ca389-0832-41bc-8030-3e0c7fd13674'

>>>

>>> Matched DNs:

>>> Getting 0 entries:

>>>

>>>

>>> Thanks

>>>

>>> -----Original Message-----

>>> From: Dean Wells [mailto:[EMAIL PROTECTED]

>>> Sent: Thursday, April 07, 2005 5:54 PM

>>> To: Send - AD mailing list

>>> Subject: RE: [ActiveDir] GUID resolution

>>>

>>>

>>> I'm guessing you mean "octet string" ... if so and if I understand

>>> what you're asking, not really ... <GUID=> and <SID=> are little

>>> more than hard-coded bits of server-side intelligence ... am I even

>>> answering your question?

>>>

>>> --

>>> Dean Wells

>>> MSEtechnology

>>> * Email: [EMAIL PROTECTED]

>>> http://msetechnology.com

>>>

>>>

>>> -----Original Message-----

>>> From: [EMAIL PROTECTED]

>>> [mailto:[EMAIL PROTECTED] On Behalf Of David

>>> Cliffe Sent: Thursday, April 07, 2005 5:45 PM

>>> To: [email protected]

>>> Subject: RE: [ActiveDir] GUID resolution

>>>

>>> Seems you can also use that syntax <GUID=xxxx> as the argument to -b

>>> in ADFIND, which makes sense, and is nice to know.

>>>

>>> Is this because that attribute's syntax is an Octal string?� I'm

>>> just curious...not knowing too much about the way these things are

>>> stored!

>>>

>>> Thanks!

>>>

>>> -DaveC

>>> Reuters CIO Infrastructure

>>>

>>> -----Original Message-----

>>> From: [EMAIL PROTECTED]

>>> [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells

>>> Sent: Thursday, April 07, 2005 5:22 PM

>>> To: Send - AD mailing list

>>> Subject: RE: [ActiveDir] GUID resolution

>>>

>>> Noticed you said you're using 2K ... dashes are of no concern, at

>>> least to 2K3 ... don't have 2K directory handy to test right now.

>>> Either way, can't even remember if the <GUID=blah> base is

>>> supported on 2K ... assuming it is, you missed the <GUID= from the

>>> beginning of the entry.

>>>

>>>

>>> Dean Wells wrote:

>>>> 1. Run LDP

>>>> 2. Connect and BIND

>>>> 3. Select Search

>>>> 4. Enter Base DN of <GUID=[whatever the GUID is]>�� ...� include

>>>> the angled brackets

>>>> 5. Populate other dialogs accordingly, enter and run

>>>

>>> List info�� : http://www.activedir.org/List.aspx

>>> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

>>> List archive:

>>> http://www.mail-archive.com/activedir%40mail.activedir.org/

>>>

>>>

>>>

>>> List info�� : http://www.activedir.org/List.aspx

>>> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

>>> List archive:

>>> http://www.mail-archive.com/activedir%40mail.activedir.org/

>>>

>>>

>>> -----------------------------------------------------------------

>>>�������� Visit our Internet site at http://www.reuters.com

>>>

>>> To find out more about Reuters Products and Services visit

>>> http://www.reuters.com/productinfo

>>>

>>> Any views expressed in this message are those of� the� individual

>>> sender, except� where� the sender specifically states them to be

>>> the views of Reuters Ltd.

>>>

>>> List info�� : http://www.activedir.org/List.aspx

>>> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

>>> List archive:

>>> http://www.mail-archive.com/activedir%40mail.activedir.org/

>>>

>>>

>>>

>>> List info�� : http://www.activedir.org/List.aspx

>>> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

>>> List archive:

>>> http://www.mail-archive.com/activedir%40mail.activedir.org/

>>> List info�� : http://www.activedir.org/List.aspx

>>> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

>>> List archive:

>>> http://www.mail-archive.com/activedir%40mail.activedir.org/

>>>

>>>

>>> This message is for the designated recipient only and may contain

>>> privileged, proprietary, or otherwise private information.� If you

>>> have received it in error, please notify the sender immediately and

>>> delete the original.� Any other use of the email by you is

>>> prohibited. List info�� : http://www.activedir.org/List.aspx

>>> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

>>> List archive:

>>> http://www.mail-archive.com/activedir%40mail.activedir.org/

>>

>> List info�� : http://www.activedir.org/List.aspx

>> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

>> List archive:

>> http://www.mail-archive.com/activedir%40mail.activedir.org/

>

> List info�� : http://www.activedir.org/List.aspx

> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

> List archive:

> http://www.mail-archive.com/activedir%40mail.activedir.org/

>

> List info�� : http://www.activedir.org/List.aspx

> List FAQ��� : http://www.activedir.org/ListFAQ.aspx

> List archive:

> http://www.mail-archive.com/activedir%40mail.activedir.org/

 

List info�� : http://www.activedir.org/List.aspx

List FAQ��� : http://www.activedir.org/ListFAQ.aspx

List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to