asked on

ACTIVE DIRECTORY

is there any command shell or way to find CNF objects in active directory

like we have 4 or 5 domain controllers, don't know on where it s .

https://kickthatcomputer.wordpress.com/2014/11/22/seek-and-destroy-duplicate-ad-objects-with-cnf-in-the-name/

but how should i do query , how should i reach that page ,do i need to use adsiedit?

Dariusz Tyka

You can use simple query below to find all duplicated AD objects
dsquery * -filter "(cn=*cnf:*)"
For more info you can read this MS article:
https://social.technet.microsoft.com/wiki/contents/articles/15435.active-directory-duplicate-object-name-resolution.aspx

pramod1

ASKER

can i in any way see in GUI,

pramod1

ASKER

I ran this in powershell but no output

Dariusz Tyka

Then you can use ADUC snap-in and saved query. Search for (cn=*cnf:*)
See more here: https://kickthatcomputer.wordpress.com/2014/11/22/seek-and-destroy-duplicate-ad-objects-with-cnf-in-the-name/

pramod1

ASKER

https://kickthatcomputer.wordpress.com/2014/11/22/seek-and-destroy-duplicate-ad-objects-with-cnf-in-the-name/

is there any way i can do query , i go to users and computers but get lost, also i ran the command but need to delete those can i get the whole output in some text format

Dariusz Tyka

ADUC -> left click on Saves queries -> New -> Query. Name it whatever you like. Click Define query and in Find field switch to custom search. Then click advanced tab and paste here (cn=*cnf:*). Clisk OK and once again OK to start search.

pramod1

ASKER

cant type anything
Capture1.PNG

Dariusz Tyka

The find drop down menu should be 'custom search' not 'computers'.

pramod1

ASKER

ok, but how should i delete them when i get the result

Dariusz Tyka

Those are duplicated entries in active directory. If are not used can be safely deleted.

pramod1

ASKER