Figured it out: Exported just one user, and started eliminating attributes one by one. Found that I had to remove these 2 attributes to get it to work. :
userAccountControl: lastLogonTimestamp: And I think userAccountControl would work if I made the password policy the same as it is in production. Thanks Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 [email protected] The Guardian Life Insurance Company of America www.guardianlife.com From: "Coleman, Hunter" <[email protected]> To: "[email protected]" <[email protected]> Date: 06/06/2013 10:31 AM Subject: RE: [NTSysADM] LDIFDE question Sent by: [email protected] Drop dsCorePropagationData and the last 4 (uSNChanged, uSNCreated, whenChanged, whenCreated). Those are attributes that the directory service maintains. From: [email protected] [ mailto:[email protected]] On Behalf Of Christopher Bodnar Sent: Thursday, June 6, 2013 8:07 AM To: [email protected] Subject: [NTSysADM] LDIFDE question Setting up a test environment and trying to import users with LDIFDE. I know the issue is with 1 or more of the attributes I'm trying to import, but I'm not sure which ones. I have followed this KB article that lists the attributes that can't be imported: http://support.microsoft.com/kb/276382 But I'm thinking that this might be an incomplete list. Here are the attributes I am trying to import: accountExpires changetype cn codePage countryCode description displayName distinguishedName dn dSCorePropagationData givenName homeDirectory homeDrive instanceType ipPhone lastLogonTimestamp lockoutTime logonHours mail name objectCategory objectClass profilePath sAMAccountName scriptPath sn userAccountControl userParameters userPrincipalName uSNChanged uSNCreated whenChanged whenCreated Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 [email protected] The Guardian Life Insurance Company of America www.guardianlife.com ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.
<<image/jpeg>>
<<image/jpeg>>
