AD 2003 - Changing a mobile number in AD attributes not working

Hi Guys,

We have a staff member that moved from Korea to China and their numbers changed. Everything updated OK in AD except for the mobile number. If I try to change the mobile number, it updates for 2 days but then reverts back to the Korea mobile number. Seems like something is overwriting the AD mobile attribute. Any ideas guys? I have checked ADSI and exchange and they both update when I make the change in AD mobile attribute, but like AD, they revert back after 2 days. We also have cisco jabber that integrates with AD so the new mobile should reflect in jabber but doesnt.

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Thomas GrassiSystems AdministratorCommented:
Do you have an AD server in Korea?  Does it replicate with the one in China?

If it does then the AD records in Korea is overlaying your AD record in China

If you have access to the AD in Korea make the change there

if not have the administrator there make the change

AmitIT ArchitectCommented:
It is not AD. I also faced similar issue later found that my HR has an application that overwrites the changes. You need to check, if you have any application which is controlling these changes.

Did you change the country settings (International setting in control pannel)? The modem settings also can change the country code on the phone numbers.

Are You Protected from Q3's Internet Threats?

Every quarter, WatchGuard's Threat Lab releases a security report that analyzes the top threat trends impacting companies around the world. For Q3, we saw that 6.8% of the top 100K websites use insecure SSL protocols. Read the full report to start protecting your business today!

Will SzymkowskiSenior Solution ArchitectCommented:
Your best bet would be to enable Active Directory Auditing and where the account is being modified.

Once you know this info you will be able to easily identify what is changing the value.

I have got a HowTo for this. See below link....

I would also recommend using Active Directory Auditor by Lepide Software as well.

out2getyouAuthor Commented:
Hi Will,

Thanks for your reply. If I check the domain controller policy, this is what I find under the settings above:

Which one would I need to enable to find out whats going on with that mobile attribute?
Will SzymkowskiSenior Solution ArchitectCommented:
Account Management would suffice. You still need to comb through the logs and find what user modified the account. This means going through all of the security logs on all domain controllers. If you want to do this natively i would suggest that you use Windows Event Subscriptions . However if you want a nice easy to view interface then Lepide Active Directory Auditor will be what you want to use.

You also need to be aware that if the logs have already overwritten themselves you will be out of luck.

out2getyouAuthor Commented:
Hi Will,

If the domain controllers are windows server 2003, how can I use Windows Event Subsriptions?

Do I just install Lepide Active Directory Auditor (trial version) on a domain controller and go through logs that way?

Yes maybe the logs have been overwritten but I can just change it again and the logs will be updated again with the random change.

UPDATE: I cleared all the security logs, made a change to the user's mobile number, checked the event log but nothing was logged. I then just tried to create a test user and that was logged. Would the mobile number change be tracked under another audit policy?
out2getyouAuthor Commented:
We may of found the culprit. just monitoring it for the next few days. Will update shortly.
out2getyouAuthor Commented:
Sharepoint was overwriting AD. After we updated the profile of the user in sharepoint, this fixed the issue. cheers

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
out2getyouAuthor Commented:
thanks guys
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.