Search This Blog

Sunday, August 7, 2011

How to Clean Up Lingering Object in Active Directory

Quote from: http://blogs.technet.com//b/glennl/archive/2007/07/26/clean-that-active-directory-forest-of-lingering-objects.aspx

Consider the following illustration that explains how the above methodology is the most efficient and thorough approach possible with repadmin /removelingeringobjects.
DC1,2,3 all host a writable copy of domain A. DC5,6,7 host a read only copy of domain A.

DC1 will be chosen as an initial target for this illustration. DC1 may be clean or dirty with respect to lingering objects.
1) Clean a target DC.
    • Repadmin /removelingeringobjects
    • Repadmin /removelingeringobjects
DC1 is now clean as compared to DC2,3.
DC1 now becomes the source to be used to clean DC2,3.

2) Clean remaining DCs using the target in 1) above as the source DC.
    • Repadmin /removelingeringobjects
    • Repadmin /removelingeringobjects   
DC2,3 are now clean with respect to DC1. This approach makes DC1,2,3 consistent with each other.
At this point any writable DC for domain A can be used as a source to clean the DCs hosting a read only copy of domain A. DC1 will be chosen as the source DC for cleaning the DCs hosting read only copies of domain A.

3) Clean all DCs hosting a read only copy of domain A.
    • Repadmin /removelingeringobjects
    • Repadmin /removelingeringobjects
    • Repadmin /removelingeringobjects
At this point all DCs hosting a read only copy of domain A are consistent with each other and are consistent* with the writable DCs for domain A.

1 comment:

Unknown said...

Thanks sharing this information, this article explanation step by step how clean lingering active directory object. I found helpful resource from http://www.lepide.com/active-directory-cleaner/ which helps to clean and identify inactive user and computer accounts and easily manage inactive accounts and schedule active directory cleanup actions.

Search Google