Hello all,
i have extracted a list of all userobjects from our AD with the use of Power GUI, no filters, just all objects all fields.
So i got this list of 3000+ objects and started noticing that for some users there where 2 lines in the file, and they where almost identical.
The Logonname is identical(and UPN), the WhenCreated is identical, as are most fields.
The objectSid and objectGUID differ by 1, so that if the first lines GUID ends ...11C38, the next line ends ...11C39.
Some of the duplicates only differ in the objectSid field by 1, the objectGUID is identical.
Some fields that i suspect the script did not add but got auto-filled differ, for example PrimaryGroupId.
The first line shows 513 and the second 494,023638284678 ( not sure about the decimal point, could be Excel formating at work here)
Is this normal or an error?
I know these users have been scripted into the AD, so that is possibly the reason.
Some odd behaviour I´ve noticed so far; GPO´s get applied even though it´s been denied for a user, that user is among the ones with duplicate "objects".
I´ve ran the ntdsutil, but it reports no errors, which is ok from its viewpoint i guess, the SID:s are unique.