Two objects with the same RDN can't exist in one container. For example, in the container CN=Users,DC=SavillTech, CN=John Savill and OU=John Savill are allowed because one is a user and the other is an organisational unit (OU). However, CN=John Savill and CN=John Savill aren't allowed.
The only way you can have a duplicate RDN is if two objects are created on different domain controllers (DCs). But at the next replication cycle, the system will rename the older object.
To find objects that the system has renamed because of RDN collisions, use the search.vbs script in \support\tools\support.cab as follows:
cscript search.vbs "LDAP://Any matches will display the RDN for the renamed objects./dc= ,dc=com" /C:"(CN=*\0ACNF:*)" /P:distinguishedName /S:SubTree
No comments:
Post a Comment