none
Finding Duplicate computer objects in Active Directory

    Question

  • Hi

    is their any query to find

    Duplicate computer objects in Active Directory ?


    Santosh Dharamsale
    Wednesday, June 08, 2011 8:22 AM

All replies

  • Hello,

    each object in the domain is unique by it's SID, so i can not really follow your question.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Wednesday, June 08, 2011 8:28 AM
  • Like Meinold mentioned, each AD object is identified by its SID.

    AD object SID = domain SID + RID (RIDs are unique) => SIDs are unique. 

    So, what are you searching for exactly?

    If you want to search computer accounts based on certain criterias, you can use dsquery computer command.

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

    Wednesday, June 08, 2011 8:35 AM
  • A duplicate computer will be identified by the same name on the network, so either searching with SID or exporting all the computer object info in excel & filter the duplicate one else there is no other way i can think of. Start ADUC, select all the computer & click on export list & save it as .csv file & open it in excel.

    The duplicate computer will also have CNF along with its hostname, so you can filter & remove them. 

    You can also remove stale records using oldcmp tool from Joe Richards & its free.

    http://www.joeware.net/freetools/tools/oldcmp/index.htm

    How many computer objects are there in AD

     

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.


    Wednesday, June 08, 2011 8:47 AM
  • Each computer account at the time it is joined to the domain, is assigned a GUID and a SID, which is unique to the domain.  Even though, if you were to have a second machine with the exact same name within your domain it wouldn't have the same GUID or SID.  AD won't allow a duplicate name within a domain, BUT you can have a duplicate name within a forest.  If you are searching for that then I would recommend you look into dns under each domain.

    If you are getting duplicate name error messages, this is probably do to the fact you have duplicate ip addresses.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

    Wednesday, June 08, 2011 11:59 AM
  • Each computer account at the time it is joined to the domain, is assigned a GUID and a SID, which is unique to the domain.  Even though, if you were to have a second machine with the exact same name within your domain it wouldn't have the same GUID or SID.  AD won't allow a duplicate name within a domain, BUT you can have a duplicate name within a forest.  If you are searching for that then I would recommend you look into dns under each domain.

    If you are getting duplicate name error messages, this is probably do to the fact you have duplicate ip addresses.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

    Wednesday, June 08, 2011 11:59 AM
  • Paul, mistakenly your thread is posted twice.

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG 

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    • Proposed as answer by dumont_r Wednesday, July 11, 2012 7:03 PM
    • Unproposed as answer by dumont_r Wednesday, July 11, 2012 7:03 PM
    Wednesday, June 08, 2011 12:08 PM
  • What do you mean by “duplicate computer object”?  I “should” be unique.  Please provide more information.


    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX

    Blogs - http://blogs.sivarajan.com/
    Articles - http://www.sivarajan.com/publications.html
    Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara
    This posting is provided AS IS with no warranties,and confers no rights.
    Wednesday, June 08, 2011 12:11 PM
  • Paul, mistakenly your thread is posted twice.

     

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG 

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Hello Awinish,

    I saw this behavior today. I posted and it said that there is an error so I posted again and after refresh I found my reply posted twice.

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

    Wednesday, June 08, 2011 12:20 PM
  • May be some issues at backend & moderator will notice the issue.

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG 

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

     

    Wednesday, June 08, 2011 12:23 PM
  • If the problem persists, i will report that here: http://social.technet.microsoft.com/Forums/en-US/suggest/threads

    For me, it happen just once.

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

    Wednesday, June 08, 2011 12:29 PM
  • I have the same issue, but it is not duplicated I think. I am in a computer Lab and I created a sequence of names and to the domain.

    After some days when I am trying to install some programs using the administrator login it won't allow. I can't even change the name using the login. After that I go back to work group and change the name, some time it works sometimes not. 

    Sunday, July 14, 2013 7:57 AM
  • I have the same issue, but it is not duplicated I think. I am in a computer Lab and I created a sequence of names and to the domain.

    After some days when I am trying to install some programs using the administrator login it won't allow. I can't even change the name using the login. After that I go back to work group and change the name, some time it works sometimes not. 

    Hello,

    please create your own thread and include error messages, event viewer errors and the used OS version including the service pack and patch level.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Sunday, July 14, 2013 4:25 PM