<div>
Well CNF: says it is a Duplicate object. This article talks about it.<br><a href="https://social.technet.microsoft.com/wiki/contents/articles/15435.active-directory-duplicate-object-name-resolution.aspx" rel="ugc nofollow">Active Directory: Duplicate Object Name Resolution - TechNet Articles - United States (English) - TechNet Wiki (microsoft.com)</a>&nbsp;
</div>


Director of Information Technology

Chris Babcock

<div>
Well, actually, that is called a Relative Distinguished Name conflict but either way, glad you got it resolved
</div>


<div>
<div class="content wysiwyg-content fr-view">
So, I've noticed that one particular user is showing up with CNF:longstringofnumbersName in all the AD Security Groups she belongs to. &nbsp;<br><br>For example, if her name was Jane Smith, she would be listed as CNF:9s383flksjf-3422-2342-23d-dfklaj9se34JaneSmith (not the real string of numbers). &nbsp;<br><br>This is showing in all of the groups she is a member of.<br><br>We are a single Domain with 2 DCs (one local, one in a DC). &nbsp;We sync with M365 using Azure AD Connect. &nbsp;We used to be in a hybrid environment, but are no longer. &nbsp;This was showing up prior to decommissioning the hybrid. &nbsp;Not sure that is relevant, but wanted to make sure it was known. <br><br><a href="https://filedb.experts-exchange.com/incoming/2021/05_w21/1561539/CNFGroupMembership.jpg" rel="ugc"><img src="https://filedb.experts-exchange.com/incoming/2021/05_w21/1561539/CNFGroupMembership.jpg" class="fr-fic fr-dib"></a>
</div>
</div>


CNFGroupMembership.jpg


So, I've noticed that one particular user is showing up with CNF:longstringofnumbersName in all the AD Security Groups she belongs to.  
For example, if her name was Jane Smith, she would be listed as CNF:9s383flksjf-3422-2342-23d-dfklaj9se34JaneSmith (not the real string of numbers).  
This is showing in all of the groups she is a member of.
We are a single Domain with 2 DCs (one local, one in a DC).  We sync with M365 using Azure AD Connect.  We used to be in a hybrid environment, but are no longer.  This was showing up prior to decommissioning the hybrid.  Not sure that is relevant, but wanted to make sure it was known.

AD account showing as CNF:longstringnumbersName in all AD Group Memberships

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.