Dean on another fork identified where repadmin gets the GUIDs it can resolve. It does a search in CN=Sites (maybe CN=Configuration) for all DSA objects (aka "nTDSDSA" or "NTDS Settings objects", retrieving the two attributes Dean mentioned, and makes a table/cache to translate the names to GUIDs. If you want, you can use "/nocache" to not build the cache (and consequently possibly speed up the operation) and then you will see all GUIDs in your UTDVec.
Cheers, BrettSh On Tue, 21 Feb 2006, Scott Klassen wrote: > Thanks Michael and Dean. Very good information. ADFind came up empty on > the GUIDs, so wherever Repadmin is getting this info from, it is well > buried. I'm not going to lose any sleep over it. The more I learn on this > list, the more things I don't want to mess with. :) > > Scott Klassen > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. > Sent: Tuesday, February 21, 2006 6:44 AM > To: [email protected] > Subject: RE: [ActiveDir] repadmin info oddity > > Adfind (http://www.joeware.net/win/free/tools/adfind.htm) to the rescue! > I recently had to do this and got it accomplished with the following > syntax (with a little help from joe :) ): > > adfind -default -binenc -f > objectGUID={{GUID:0B3F5BC4-5713-4611-8F6A-752A3B0DE664}} dn > > ("adfind /???" For lots of good info!) > > Mike Thommes > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of SCOTT KLASSEN > Sent: Monday, February 20, 2006 8:56 PM > To: [email protected] > Subject: [ActiveDir] repadmin info oddity > > I try to keep up on new or updated MS KB articles and often check to see > how > they correlate with my environment. I noticed that 875495, dealing with > USN > rollbacks, was updated earlier this month. As I've experienced two AD > issues, both of which needed PSS involvement (one dealing with sysvol > inconsistency and the other which wound up being the RID master going on > > temporary strike) I figured that I'd do a quick check as described in > the > article. On the good side, the USN's are consistent between > controllers. > On the disconcerting side, I got a little more information than I was > expecting. Besides my DC's, I also got USN listings for several GUIDs. > I > assume these are leftovers from DC demotions and only remain in the form > of > historical data. Do I need to worry about these (especially the DC1 > (retired) listing) and is there a way I can resolve the GUIDs to names, > find > where this info is hiding, and clear them out? > > Thanks, > > Scott Klassen > > >repadmin /showutdvec dc1 dc=domain,dc=com > Caching GUIDs. > .. > Default-First-Site-Name\DC2 @ USN 455091 @ Time 2006-02-20 > 20:08:20 > 2c92760e-e8fc-4418-947e-3b1016ab8514 @ USN 1012381 @ Time 2005-08-04 > 00:02:34 > 6e129965-56c3-469e-b70a-f1fdfb8bb2cc @ USN 969931 @ Time 2004-07-24 > 11:53:16 > Default-First-Site-Name\DC1 @ USN 1717571 @ Time 2006-02-20 > 20:10:50 > Default-First-Site-Name\DC1 (retired) @ USN 1298674 @ Time 2005-08-05 > 06:36:16 > e2199f22-f1dd-4d1c-90a6-0e8bb874f355 @ USN 744173 @ Time 2004-12-28 > 20:52:04 > ff0d7d50-214f-4bc1-96b6-55ac6ef317f0 @ USN 852323 @ Time 2005-06-08 > 14:29:20 > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
